Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2015-8818 (GCVE-0-2015-8818)
Vulnerability from cvelistv5
Published
2016-12-29 22:00
Modified
2024-08-06 08:29
Severity ?
VLAI Severity ?
EPSS score ?
CWE
- n/a
Summary
The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors.
References
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T08:29:22.063Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "RHSA-2016:2671",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2671.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300771"
},
{
"name": "RHSA-2016:2706",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2706.html"
},
{
"name": "[oss-security] 20160301 CVE request Qemu: OOB access in address_space_rw leads to segmentation fault",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2016/03/01/1"
},
{
"name": "[oss-security] 20160301 Re: CVE request Qemu: OOB access in address_space_rw leads to segmentation fault",
"tags": [
"mailing-list",
"x_refsource_MLIST",
"x_transferred"
],
"url": "http://www.openwall.com/lists/oss-security/2016/03/01/10"
},
{
"name": "RHSA-2016:2705",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2705.html"
},
{
"name": "RHSA-2016:2670",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2670.html"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=b242e0e0e2969c044a318e56f7988bbd84de1f63"
},
{
"name": "RHSA-2016:2704",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT",
"x_transferred"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2704.html"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2015-07-06T00:00:00",
"descriptions": [
{
"lang": "en",
"value": "The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2018-01-04T19:57:01",
"orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"shortName": "redhat"
},
"references": [
{
"name": "RHSA-2016:2671",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2671.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300771"
},
{
"name": "RHSA-2016:2706",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2706.html"
},
{
"name": "[oss-security] 20160301 CVE request Qemu: OOB access in address_space_rw leads to segmentation fault",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2016/03/01/1"
},
{
"name": "[oss-security] 20160301 Re: CVE request Qemu: OOB access in address_space_rw leads to segmentation fault",
"tags": [
"mailing-list",
"x_refsource_MLIST"
],
"url": "http://www.openwall.com/lists/oss-security/2016/03/01/10"
},
{
"name": "RHSA-2016:2705",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2705.html"
},
{
"name": "RHSA-2016:2670",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2670.html"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=b242e0e0e2969c044a318e56f7988bbd84de1f63"
},
{
"name": "RHSA-2016:2704",
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2704.html"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
"assignerShortName": "redhat",
"cveId": "CVE-2015-8818",
"datePublished": "2016-12-29T22:00:00",
"dateReserved": "2016-03-01T00:00:00",
"dateUpdated": "2024-08-06T08:29:22.063Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"nvd": "{\"cve\":{\"id\":\"CVE-2015-8818\",\"sourceIdentifier\":\"secalert@redhat.com\",\"published\":\"2016-12-29T22:59:00.340\",\"lastModified\":\"2025-04-12T10:46:40.837\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors.\"},{\"lang\":\"es\",\"value\":\"La funci\u00f3n cpu_physical_memory_write_rom_internal en exec.c en QEMU (tambi\u00e9n conocido como Quick Emulator) no omite apropiadamente las regiones MMIO, lo que permite a usuarios invitados privilegiados locales provocar una denegaci\u00f3n de servicio (ca\u00edda del hu\u00e9sped) a trav\u00e9s de vectores no especificados.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":5.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":3.6}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:L/AC:L/Au:N/C:N/I:N/A:P\",\"baseScore\":2.1,\"accessVector\":\"LOCAL\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"LOW\",\"exploitabilityScore\":3.9,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*\",\"versionEndIncluding\":\"2.3.1\",\"matchCriteriaId\":\"19E6775C-BA58-4D7E-96AB-9283C99D9641\"}]}]}],\"references\":[{\"url\":\"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=b242e0e0e2969c044a318e56f7988bbd84de1f63\",\"source\":\"secalert@redhat.com\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-2670.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-2671.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-2704.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-2705.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-2706.html\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2016/03/01/1\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2016/03/01/10\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1300771\",\"source\":\"secalert@redhat.com\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=b242e0e0e2969c044a318e56f7988bbd84de1f63\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-2670.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-2671.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-2704.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-2705.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://rhn.redhat.com/errata/RHSA-2016-2706.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2016/03/01/1\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2016/03/01/10\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Mailing List\",\"Third Party Advisory\"]},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=1300771\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Issue Tracking\"]}]}}"
}
}
rhsa-2016:2706
Vulnerability from csaf_redhat
Published
2016-11-14 19:55
Modified
2025-08-04 11:52
Summary
Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update
Notes
Topic
An update for qemu-kvm-rhev is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provides the user-space component for running virtual machines using KVM in environments managed by Red Hat Enterprise Virtualization Manager.
The following packages have been upgraded to a newer upstream version: qemu-kvm-rhev (2.6.0). (BZ#1386377)
Security Fix(es):
* An out-of-bounds flaw was found in the QEMU emulator built using 'address_space_translate' to map an address to a MemoryRegionSection. The flaw could occur while doing pci_dma_read/write calls, resulting in an out-of-bounds read-write access error. A privileged user inside a guest could use this flaw to crash the guest instance (denial of service). (CVE-2015-8817, CVE-2015-8818)
Red Hat would like to thank Donghai Zdh of Alibaba Inc. for reporting this issue.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for qemu-kvm-rhev is now available for Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provides the user-space component for running virtual machines using KVM in environments managed by Red Hat Enterprise Virtualization Manager.\n\nThe following packages have been upgraded to a newer upstream version: qemu-kvm-rhev (2.6.0). (BZ#1386377)\n\nSecurity Fix(es):\n\n* An out-of-bounds flaw was found in the QEMU emulator built using \u0027address_space_translate\u0027 to map an address to a MemoryRegionSection. The flaw could occur while doing pci_dma_read/write calls, resulting in an out-of-bounds read-write access error. A privileged user inside a guest could use this flaw to crash the guest instance (denial of service). (CVE-2015-8817, CVE-2015-8818)\n\nRed Hat would like to thank Donghai Zdh of Alibaba Inc. for reporting this issue.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:2706",
"url": "https://access.redhat.com/errata/RHSA-2016:2706"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1300771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300771"
},
{
"category": "external",
"summary": "1374369",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1374369"
},
{
"category": "external",
"summary": "1386377",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1386377"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2706.json"
}
],
"title": "Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2025-08-04T11:52:59+00:00",
"generator": {
"date": "2025-08-04T11:52:59+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2016:2706",
"initial_release_date": "2016-11-14T19:55:21+00:00",
"revision_history": [
{
"date": "2016-11-14T19:55:21+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-11-14T19:55:21+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-04T11:52:59+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product": {
"name": "Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:5::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64",
"product": {
"name": "qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64",
"product_id": "qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-tools-rhev@2.6.0-27.el7?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"product": {
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"product_id": "qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-rhev@2.6.0-27.el7?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"product": {
"name": "qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"product_id": "qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-img-rhev@2.6.0-27.el7?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"product": {
"name": "qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"product_id": "qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-common-rhev@2.6.0-27.el7?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"product": {
"name": "qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"product_id": "qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-rhev-debuginfo@2.6.0-27.el7?arch=x86_64\u0026epoch=10"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.src",
"product": {
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.src",
"product_id": "qemu-kvm-rhev-10:2.6.0-27.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-rhev@2.6.0-27.el7?arch=src\u0026epoch=10"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-img-rhev-10:2.6.0-27.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64"
},
"product_reference": "qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64"
},
"product_reference": "qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.src as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.6.0-27.el7.src"
},
"product_reference": "qemu-kvm-rhev-10:2.6.0-27.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64"
},
"product_reference": "qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64"
},
"product_reference": "qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 5.0 (Icehouse) for RHEL 7",
"product_id": "7Server-RH7-RHOS-5.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
},
"product_reference": "qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-5.0"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Donghai Zdh"
],
"organization": "Alibaba Inc."
}
],
"cve": "CVE-2015-8817",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2016-01-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1300771"
}
],
"notes": [
{
"category": "description",
"text": "An out-of-bounds flaw was found in the QEMU emulator built using \u0027address_space_translate\u0027 to map an address to a MemoryRegionSection. The flaw could occur while doing pci_dma_read/write calls, resulting in an out-of-bounds read-write access error. A privileged user inside a guest could use this flaw to crash the guest instance (denial of service).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Qemu: OOB access in address_space_rw leads to segmentation fault",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-5.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-8817"
},
{
"category": "external",
"summary": "RHBZ#1300771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300771"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-8817",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-8817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8817"
}
],
"release_date": "2016-01-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-11-14T19:55:21+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.",
"product_ids": [
"7Server-RH7-RHOS-5.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:2706"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:A/AC:H/Au:S/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Server-RH7-RHOS-5.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Qemu: OOB access in address_space_rw leads to segmentation fault"
},
{
"acknowledgments": [
{
"names": [
"Donghai Zdh"
],
"organization": "Alibaba Inc."
}
],
"cve": "CVE-2015-8818",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2016-01-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1300771"
}
],
"notes": [
{
"category": "description",
"text": "An out-of-bounds flaw was found in the QEMU emulator built using \u0027address_space_translate\u0027 to map an address to a MemoryRegionSection. The flaw could occur while doing pci_dma_read/write calls, resulting in an out-of-bounds read-write access error. A privileged user inside a guest could use this flaw to crash the guest instance (denial of service).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Qemu: OOB access in address_space_rw leads to segmentation fault",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-5.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-8818"
},
{
"category": "external",
"summary": "RHBZ#1300771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300771"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-8818",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8818"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-8818",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8818"
}
],
"release_date": "2016-01-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-11-14T19:55:21+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.",
"product_ids": [
"7Server-RH7-RHOS-5.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:2706"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:A/AC:H/Au:S/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Server-RH7-RHOS-5.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Qemu: OOB access in address_space_rw leads to segmentation fault"
},
{
"acknowledgments": [
{
"names": [
"Ling Liu"
],
"organization": "Qihoo 360 Inc."
}
],
"cve": "CVE-2016-2857",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2016-01-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1296567"
}
],
"notes": [
{
"category": "description",
"text": "An out-of-bounds read-access flaw was found in the QEMU emulator built with IP checksum routines. The flaw could occur when computing a TCP/UDP packet\u0027s checksum, because a QEMU function used the packet\u0027s payload length without checking against the data buffer\u0027s size. A user inside a guest could use this flaw to crash the QEMU process (denial of service).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Qemu: net: out of bounds read in net_checksum_calculate()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This has been rated as having Low security impact and is not currently\nplanned to be addressed in future updates. For additional information, refer\nto the Red Hat Enterprise Linux Life Cycle:\nhttps://access.redhat.com/support/policy/updates/errata/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-5.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2857"
},
{
"category": "external",
"summary": "RHBZ#1296567",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1296567"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2857",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2857"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2857",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2857"
}
],
"release_date": "2016-02-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-11-14T19:55:21+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.",
"product_ids": [
"7Server-RH7-RHOS-5.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:2706"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:M/Au:N/C:P/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-5.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-5.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Qemu: net: out of bounds read in net_checksum_calculate()"
}
]
}
rhsa-2016:2671
Vulnerability from csaf_redhat
Published
2016-11-07 18:14
Modified
2025-08-04 11:53
Summary
Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update
Notes
Topic
An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 9.0 (Mitaka).
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provides the user-space component for running virtual machines using KVM in environments managed by Red Hat Enterprise Virtualization Manager.
The following packages have been upgraded to a newer upstream version: qemu-kvm-rhev (2.6.0). (BZ#1386385)
Security Fix(es):
* An out-of-bounds flaw was found in the QEMU emulator built using 'address_space_translate' to map an address to a MemoryRegionSection. The flaw could occur while doing pci_dma_read/write calls, resulting in an out-of-bounds read-write access error. A privileged user inside a guest could use this flaw to crash the guest instance (denial of service). (CVE-2015-8817, CVE-2015-8818)
Red Hat would like to thank Donghai Zdh of Alibaba Inc. for reporting this issue.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 9.0 (Mitaka).\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provides the user-space component for running virtual machines using KVM in environments managed by Red Hat Enterprise Virtualization Manager.\n\nThe following packages have been upgraded to a newer upstream version: qemu-kvm-rhev (2.6.0). (BZ#1386385)\n\nSecurity Fix(es):\n\n* An out-of-bounds flaw was found in the QEMU emulator built using \u0027address_space_translate\u0027 to map an address to a MemoryRegionSection. The flaw could occur while doing pci_dma_read/write calls, resulting in an out-of-bounds read-write access error. A privileged user inside a guest could use this flaw to crash the guest instance (denial of service). (CVE-2015-8817, CVE-2015-8818)\n\nRed Hat would like to thank Donghai Zdh of Alibaba Inc. for reporting this issue.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:2671",
"url": "https://access.redhat.com/errata/RHSA-2016:2671"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1300771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300771"
},
{
"category": "external",
"summary": "1374365",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1374365"
},
{
"category": "external",
"summary": "1386385",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1386385"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2671.json"
}
],
"title": "Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2025-08-04T11:53:19+00:00",
"generator": {
"date": "2025-08-04T11:53:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2016:2671",
"initial_release_date": "2016-11-07T18:14:15+00:00",
"revision_history": [
{
"date": "2016-11-07T18:14:15+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-11-07T18:14:15+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-04T11:53:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 9.0",
"product": {
"name": "Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:9::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64",
"product": {
"name": "qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64",
"product_id": "qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-tools-rhev@2.6.0-27.el7?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"product": {
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"product_id": "qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-rhev@2.6.0-27.el7?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"product": {
"name": "qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"product_id": "qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-img-rhev@2.6.0-27.el7?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"product": {
"name": "qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"product_id": "qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-common-rhev@2.6.0-27.el7?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"product": {
"name": "qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"product_id": "qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-rhev-debuginfo@2.6.0-27.el7?arch=x86_64\u0026epoch=10"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.src",
"product": {
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.src",
"product_id": "qemu-kvm-rhev-10:2.6.0-27.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-rhev@2.6.0-27.el7?arch=src\u0026epoch=10"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-img-rhev-10:2.6.0-27.el7.x86_64 as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64"
},
"product_reference": "qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64 as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64"
},
"product_reference": "qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.src as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:qemu-kvm-rhev-10:2.6.0-27.el7.src"
},
"product_reference": "qemu-kvm-rhev-10:2.6.0-27.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.x86_64 as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64"
},
"product_reference": "qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64 as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64"
},
"product_reference": "qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64 as a component of Red Hat OpenStack Platform 9.0",
"product_id": "7Server-RH7-RHOS-9.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
},
"product_reference": "qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-9.0"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Donghai Zdh"
],
"organization": "Alibaba Inc."
}
],
"cve": "CVE-2015-8817",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2016-01-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1300771"
}
],
"notes": [
{
"category": "description",
"text": "An out-of-bounds flaw was found in the QEMU emulator built using \u0027address_space_translate\u0027 to map an address to a MemoryRegionSection. The flaw could occur while doing pci_dma_read/write calls, resulting in an out-of-bounds read-write access error. A privileged user inside a guest could use this flaw to crash the guest instance (denial of service).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Qemu: OOB access in address_space_rw leads to segmentation fault",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-9.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-8817"
},
{
"category": "external",
"summary": "RHBZ#1300771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300771"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-8817",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-8817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8817"
}
],
"release_date": "2016-01-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-11-07T18:14:15+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.",
"product_ids": [
"7Server-RH7-RHOS-9.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:2671"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:A/AC:H/Au:S/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Server-RH7-RHOS-9.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Qemu: OOB access in address_space_rw leads to segmentation fault"
},
{
"acknowledgments": [
{
"names": [
"Donghai Zdh"
],
"organization": "Alibaba Inc."
}
],
"cve": "CVE-2015-8818",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2016-01-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1300771"
}
],
"notes": [
{
"category": "description",
"text": "An out-of-bounds flaw was found in the QEMU emulator built using \u0027address_space_translate\u0027 to map an address to a MemoryRegionSection. The flaw could occur while doing pci_dma_read/write calls, resulting in an out-of-bounds read-write access error. A privileged user inside a guest could use this flaw to crash the guest instance (denial of service).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Qemu: OOB access in address_space_rw leads to segmentation fault",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-9.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-8818"
},
{
"category": "external",
"summary": "RHBZ#1300771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300771"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-8818",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8818"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-8818",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8818"
}
],
"release_date": "2016-01-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-11-07T18:14:15+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.",
"product_ids": [
"7Server-RH7-RHOS-9.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:2671"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:A/AC:H/Au:S/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Server-RH7-RHOS-9.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Qemu: OOB access in address_space_rw leads to segmentation fault"
},
{
"acknowledgments": [
{
"names": [
"Ling Liu"
],
"organization": "Qihoo 360 Inc."
}
],
"cve": "CVE-2016-2857",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2016-01-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1296567"
}
],
"notes": [
{
"category": "description",
"text": "An out-of-bounds read-access flaw was found in the QEMU emulator built with IP checksum routines. The flaw could occur when computing a TCP/UDP packet\u0027s checksum, because a QEMU function used the packet\u0027s payload length without checking against the data buffer\u0027s size. A user inside a guest could use this flaw to crash the QEMU process (denial of service).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Qemu: net: out of bounds read in net_checksum_calculate()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This has been rated as having Low security impact and is not currently\nplanned to be addressed in future updates. For additional information, refer\nto the Red Hat Enterprise Linux Life Cycle:\nhttps://access.redhat.com/support/policy/updates/errata/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-9.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2857"
},
{
"category": "external",
"summary": "RHBZ#1296567",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1296567"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2857",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2857"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2857",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2857"
}
],
"release_date": "2016-02-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-11-07T18:14:15+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.",
"product_ids": [
"7Server-RH7-RHOS-9.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:2671"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:M/Au:N/C:P/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-9.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-9.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Qemu: net: out of bounds read in net_checksum_calculate()"
}
]
}
rhsa-2016:2704
Vulnerability from csaf_redhat
Published
2016-11-14 19:44
Modified
2025-08-04 11:53
Summary
Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update
Notes
Topic
An update for qemu-kvm-rhev is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provides the user-space component for running virtual machines using KVM in environments managed by Red Hat Enterprise Virtualization Manager.
The following packages have been upgraded to a newer upstream version: qemu-kvm-rhev (2.6.0). (BZ#1386381)
Security Fix(es):
* An out-of-bounds flaw was found in the QEMU emulator built using 'address_space_translate' to map an address to a MemoryRegionSection. The flaw could occur while doing pci_dma_read/write calls, resulting in an out-of-bounds read-write access error. A privileged user inside a guest could use this flaw to crash the guest instance (denial of service). (CVE-2015-8817, CVE-2015-8818)
Red Hat would like to thank Donghai Zdh of Alibaba Inc. for reporting this issue.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for qemu-kvm-rhev is now available for Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provides the user-space component for running virtual machines using KVM in environments managed by Red Hat Enterprise Virtualization Manager.\n\nThe following packages have been upgraded to a newer upstream version: qemu-kvm-rhev (2.6.0). (BZ#1386381)\n\nSecurity Fix(es):\n\n* An out-of-bounds flaw was found in the QEMU emulator built using \u0027address_space_translate\u0027 to map an address to a MemoryRegionSection. The flaw could occur while doing pci_dma_read/write calls, resulting in an out-of-bounds read-write access error. A privileged user inside a guest could use this flaw to crash the guest instance (denial of service). (CVE-2015-8817, CVE-2015-8818)\n\nRed Hat would like to thank Donghai Zdh of Alibaba Inc. for reporting this issue.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:2704",
"url": "https://access.redhat.com/errata/RHSA-2016:2704"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1300771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300771"
},
{
"category": "external",
"summary": "1374367",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1374367"
},
{
"category": "external",
"summary": "1386381",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1386381"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2704.json"
}
],
"title": "Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2025-08-04T11:53:09+00:00",
"generator": {
"date": "2025-08-04T11:53:09+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2016:2704",
"initial_release_date": "2016-11-14T19:44:07+00:00",
"revision_history": [
{
"date": "2016-11-14T19:44:07+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-11-14T19:44:07+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-04T11:53:09+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product": {
"name": "Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:7::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64",
"product": {
"name": "qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64",
"product_id": "qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-tools-rhev@2.6.0-27.el7?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"product": {
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"product_id": "qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-rhev@2.6.0-27.el7?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"product": {
"name": "qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"product_id": "qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-img-rhev@2.6.0-27.el7?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"product": {
"name": "qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"product_id": "qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-common-rhev@2.6.0-27.el7?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"product": {
"name": "qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"product_id": "qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-rhev-debuginfo@2.6.0-27.el7?arch=x86_64\u0026epoch=10"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.src",
"product": {
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.src",
"product_id": "qemu-kvm-rhev-10:2.6.0-27.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-rhev@2.6.0-27.el7?arch=src\u0026epoch=10"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-img-rhev-10:2.6.0-27.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64"
},
"product_reference": "qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64"
},
"product_reference": "qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.src as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0:qemu-kvm-rhev-10:2.6.0-27.el7.src"
},
"product_reference": "qemu-kvm-rhev-10:2.6.0-27.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64"
},
"product_reference": "qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64"
},
"product_reference": "qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-7.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 7.0 (Kilo) for RHEL 7",
"product_id": "7Server-RH7-RHOS-7.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
},
"product_reference": "qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-7.0"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Donghai Zdh"
],
"organization": "Alibaba Inc."
}
],
"cve": "CVE-2015-8817",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2016-01-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1300771"
}
],
"notes": [
{
"category": "description",
"text": "An out-of-bounds flaw was found in the QEMU emulator built using \u0027address_space_translate\u0027 to map an address to a MemoryRegionSection. The flaw could occur while doing pci_dma_read/write calls, resulting in an out-of-bounds read-write access error. A privileged user inside a guest could use this flaw to crash the guest instance (denial of service).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Qemu: OOB access in address_space_rw leads to segmentation fault",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-7.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-8817"
},
{
"category": "external",
"summary": "RHBZ#1300771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300771"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-8817",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-8817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8817"
}
],
"release_date": "2016-01-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-11-14T19:44:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.",
"product_ids": [
"7Server-RH7-RHOS-7.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:2704"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:A/AC:H/Au:S/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Server-RH7-RHOS-7.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Qemu: OOB access in address_space_rw leads to segmentation fault"
},
{
"acknowledgments": [
{
"names": [
"Donghai Zdh"
],
"organization": "Alibaba Inc."
}
],
"cve": "CVE-2015-8818",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2016-01-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1300771"
}
],
"notes": [
{
"category": "description",
"text": "An out-of-bounds flaw was found in the QEMU emulator built using \u0027address_space_translate\u0027 to map an address to a MemoryRegionSection. The flaw could occur while doing pci_dma_read/write calls, resulting in an out-of-bounds read-write access error. A privileged user inside a guest could use this flaw to crash the guest instance (denial of service).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Qemu: OOB access in address_space_rw leads to segmentation fault",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-7.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-8818"
},
{
"category": "external",
"summary": "RHBZ#1300771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300771"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-8818",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8818"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-8818",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8818"
}
],
"release_date": "2016-01-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-11-14T19:44:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.",
"product_ids": [
"7Server-RH7-RHOS-7.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:2704"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:A/AC:H/Au:S/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Server-RH7-RHOS-7.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Qemu: OOB access in address_space_rw leads to segmentation fault"
},
{
"acknowledgments": [
{
"names": [
"Ling Liu"
],
"organization": "Qihoo 360 Inc."
}
],
"cve": "CVE-2016-2857",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2016-01-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1296567"
}
],
"notes": [
{
"category": "description",
"text": "An out-of-bounds read-access flaw was found in the QEMU emulator built with IP checksum routines. The flaw could occur when computing a TCP/UDP packet\u0027s checksum, because a QEMU function used the packet\u0027s payload length without checking against the data buffer\u0027s size. A user inside a guest could use this flaw to crash the QEMU process (denial of service).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Qemu: net: out of bounds read in net_checksum_calculate()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This has been rated as having Low security impact and is not currently\nplanned to be addressed in future updates. For additional information, refer\nto the Red Hat Enterprise Linux Life Cycle:\nhttps://access.redhat.com/support/policy/updates/errata/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-7.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2857"
},
{
"category": "external",
"summary": "RHBZ#1296567",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1296567"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2857",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2857"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2857",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2857"
}
],
"release_date": "2016-02-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-11-14T19:44:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.",
"product_ids": [
"7Server-RH7-RHOS-7.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:2704"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:M/Au:N/C:P/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-7.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-7.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Qemu: net: out of bounds read in net_checksum_calculate()"
}
]
}
rhsa-2016:2670
Vulnerability from csaf_redhat
Published
2016-11-07 18:14
Modified
2025-08-04 11:53
Summary
Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update
Notes
Topic
An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 8.0 (Liberty).
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provides the user-space component for running virtual machines using KVM in environments managed by Red Hat Enterprise Virtualization Manager.
The following packages have been upgraded to a newer upstream version: qemu-kvm-rhev (2.6.0). (BZ#1386383)
Security Fix(es):
* An out-of-bounds flaw was found in the QEMU emulator built using 'address_space_translate' to map an address to a MemoryRegionSection. The flaw could occur while doing pci_dma_read/write calls, resulting in an out-of-bounds read-write access error. A privileged user inside a guest could use this flaw to crash the guest instance (denial of service). (CVE-2015-8817, CVE-2015-8818)
Red Hat would like to thank Donghai Zdh of Alibaba Inc. for reporting this issue.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for qemu-kvm-rhev is now available for Red Hat OpenStack Platform 8.0 (Liberty).\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provides the user-space component for running virtual machines using KVM in environments managed by Red Hat Enterprise Virtualization Manager.\n\nThe following packages have been upgraded to a newer upstream version: qemu-kvm-rhev (2.6.0). (BZ#1386383)\n\nSecurity Fix(es):\n\n* An out-of-bounds flaw was found in the QEMU emulator built using \u0027address_space_translate\u0027 to map an address to a MemoryRegionSection. The flaw could occur while doing pci_dma_read/write calls, resulting in an out-of-bounds read-write access error. A privileged user inside a guest could use this flaw to crash the guest instance (denial of service). (CVE-2015-8817, CVE-2015-8818)\n\nRed Hat would like to thank Donghai Zdh of Alibaba Inc. for reporting this issue.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:2670",
"url": "https://access.redhat.com/errata/RHSA-2016:2670"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1300771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300771"
},
{
"category": "external",
"summary": "1374366",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1374366"
},
{
"category": "external",
"summary": "1386383",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1386383"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2670.json"
}
],
"title": "Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2025-08-04T11:53:14+00:00",
"generator": {
"date": "2025-08-04T11:53:14+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2016:2670",
"initial_release_date": "2016-11-07T18:14:27+00:00",
"revision_history": [
{
"date": "2016-11-07T18:14:27+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-11-07T18:14:27+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-04T11:53:14+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenStack Platform 8.0 (Liberty)",
"product": {
"name": "Red Hat OpenStack Platform 8.0 (Liberty)",
"product_id": "7Server-RH7-RHOS-8.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:8::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64",
"product": {
"name": "qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64",
"product_id": "qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-tools-rhev@2.6.0-27.el7?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"product": {
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"product_id": "qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-rhev@2.6.0-27.el7?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"product": {
"name": "qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"product_id": "qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-img-rhev@2.6.0-27.el7?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"product": {
"name": "qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"product_id": "qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-common-rhev@2.6.0-27.el7?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"product": {
"name": "qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"product_id": "qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-rhev-debuginfo@2.6.0-27.el7?arch=x86_64\u0026epoch=10"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.src",
"product": {
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.src",
"product_id": "qemu-kvm-rhev-10:2.6.0-27.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-rhev@2.6.0-27.el7?arch=src\u0026epoch=10"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-img-rhev-10:2.6.0-27.el7.x86_64 as a component of Red Hat OpenStack Platform 8.0 (Liberty)",
"product_id": "7Server-RH7-RHOS-8.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64"
},
"product_reference": "qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-8.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64 as a component of Red Hat OpenStack Platform 8.0 (Liberty)",
"product_id": "7Server-RH7-RHOS-8.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64"
},
"product_reference": "qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-8.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.src as a component of Red Hat OpenStack Platform 8.0 (Liberty)",
"product_id": "7Server-RH7-RHOS-8.0:qemu-kvm-rhev-10:2.6.0-27.el7.src"
},
"product_reference": "qemu-kvm-rhev-10:2.6.0-27.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOS-8.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.x86_64 as a component of Red Hat OpenStack Platform 8.0 (Liberty)",
"product_id": "7Server-RH7-RHOS-8.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64"
},
"product_reference": "qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-8.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64 as a component of Red Hat OpenStack Platform 8.0 (Liberty)",
"product_id": "7Server-RH7-RHOS-8.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64"
},
"product_reference": "qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-8.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64 as a component of Red Hat OpenStack Platform 8.0 (Liberty)",
"product_id": "7Server-RH7-RHOS-8.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
},
"product_reference": "qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-8.0"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Donghai Zdh"
],
"organization": "Alibaba Inc."
}
],
"cve": "CVE-2015-8817",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2016-01-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1300771"
}
],
"notes": [
{
"category": "description",
"text": "An out-of-bounds flaw was found in the QEMU emulator built using \u0027address_space_translate\u0027 to map an address to a MemoryRegionSection. The flaw could occur while doing pci_dma_read/write calls, resulting in an out-of-bounds read-write access error. A privileged user inside a guest could use this flaw to crash the guest instance (denial of service).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Qemu: OOB access in address_space_rw leads to segmentation fault",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-8.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-8817"
},
{
"category": "external",
"summary": "RHBZ#1300771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300771"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-8817",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-8817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8817"
}
],
"release_date": "2016-01-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-11-07T18:14:27+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.",
"product_ids": [
"7Server-RH7-RHOS-8.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:2670"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:A/AC:H/Au:S/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Server-RH7-RHOS-8.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Qemu: OOB access in address_space_rw leads to segmentation fault"
},
{
"acknowledgments": [
{
"names": [
"Donghai Zdh"
],
"organization": "Alibaba Inc."
}
],
"cve": "CVE-2015-8818",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2016-01-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1300771"
}
],
"notes": [
{
"category": "description",
"text": "An out-of-bounds flaw was found in the QEMU emulator built using \u0027address_space_translate\u0027 to map an address to a MemoryRegionSection. The flaw could occur while doing pci_dma_read/write calls, resulting in an out-of-bounds read-write access error. A privileged user inside a guest could use this flaw to crash the guest instance (denial of service).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Qemu: OOB access in address_space_rw leads to segmentation fault",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-8.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-8818"
},
{
"category": "external",
"summary": "RHBZ#1300771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300771"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-8818",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8818"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-8818",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8818"
}
],
"release_date": "2016-01-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-11-07T18:14:27+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.",
"product_ids": [
"7Server-RH7-RHOS-8.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:2670"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:A/AC:H/Au:S/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Server-RH7-RHOS-8.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Qemu: OOB access in address_space_rw leads to segmentation fault"
},
{
"acknowledgments": [
{
"names": [
"Ling Liu"
],
"organization": "Qihoo 360 Inc."
}
],
"cve": "CVE-2016-2857",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2016-01-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1296567"
}
],
"notes": [
{
"category": "description",
"text": "An out-of-bounds read-access flaw was found in the QEMU emulator built with IP checksum routines. The flaw could occur when computing a TCP/UDP packet\u0027s checksum, because a QEMU function used the packet\u0027s payload length without checking against the data buffer\u0027s size. A user inside a guest could use this flaw to crash the QEMU process (denial of service).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Qemu: net: out of bounds read in net_checksum_calculate()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This has been rated as having Low security impact and is not currently\nplanned to be addressed in future updates. For additional information, refer\nto the Red Hat Enterprise Linux Life Cycle:\nhttps://access.redhat.com/support/policy/updates/errata/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-8.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2857"
},
{
"category": "external",
"summary": "RHBZ#1296567",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1296567"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2857",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2857"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2857",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2857"
}
],
"release_date": "2016-02-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-11-07T18:14:27+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.",
"product_ids": [
"7Server-RH7-RHOS-8.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:2670"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:M/Au:N/C:P/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-8.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-8.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Qemu: net: out of bounds read in net_checksum_calculate()"
}
]
}
rhsa-2016:2705
Vulnerability from csaf_redhat
Published
2016-11-14 20:03
Modified
2025-08-04 11:53
Summary
Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update
Notes
Topic
An update for qemu-kvm-rhev is now available for Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7.
Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details
KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provides the user-space component for running virtual machines using KVM in environments managed by Red Hat Enterprise Virtualization Manager.
The following packages have been upgraded to a newer upstream version: qemu-kvm-rhev (2.6.0). (BZ#1386379)
Security Fix(es):
* An out-of-bounds flaw was found in the QEMU emulator built using 'address_space_translate' to map an address to a MemoryRegionSection. The flaw could occur while doing pci_dma_read/write calls, resulting in an out-of-bounds read-write access error. A privileged user inside a guest could use this flaw to crash the guest instance (denial of service). (CVE-2015-8817, CVE-2015-8818)
Red Hat would like to thank Donghai Zdh of Alibaba Inc. for reporting this issue.
Terms of Use
This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for qemu-kvm-rhev is now available for Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7.\n\nRed Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm-rhev package provides the user-space component for running virtual machines using KVM in environments managed by Red Hat Enterprise Virtualization Manager.\n\nThe following packages have been upgraded to a newer upstream version: qemu-kvm-rhev (2.6.0). (BZ#1386379)\n\nSecurity Fix(es):\n\n* An out-of-bounds flaw was found in the QEMU emulator built using \u0027address_space_translate\u0027 to map an address to a MemoryRegionSection. The flaw could occur while doing pci_dma_read/write calls, resulting in an out-of-bounds read-write access error. A privileged user inside a guest could use this flaw to crash the guest instance (denial of service). (CVE-2015-8817, CVE-2015-8818)\n\nRed Hat would like to thank Donghai Zdh of Alibaba Inc. for reporting this issue.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2016:2705",
"url": "https://access.redhat.com/errata/RHSA-2016:2705"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#moderate",
"url": "https://access.redhat.com/security/updates/classification/#moderate"
},
{
"category": "external",
"summary": "1300771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300771"
},
{
"category": "external",
"summary": "1374368",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1374368"
},
{
"category": "external",
"summary": "1386379",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1386379"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_2705.json"
}
],
"title": "Red Hat Security Advisory: qemu-kvm-rhev security, bug fix, and enhancement update",
"tracking": {
"current_release_date": "2025-08-04T11:53:04+00:00",
"generator": {
"date": "2025-08-04T11:53:04+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "4.6.6"
}
},
"id": "RHSA-2016:2705",
"initial_release_date": "2016-11-14T20:03:43+00:00",
"revision_history": [
{
"date": "2016-11-14T20:03:43+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2016-11-14T20:03:43+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2025-08-04T11:53:04+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product": {
"name": "Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openstack:6::el7"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenStack Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64",
"product": {
"name": "qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64",
"product_id": "qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-tools-rhev@2.6.0-27.el7?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"product": {
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"product_id": "qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-rhev@2.6.0-27.el7?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"product": {
"name": "qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"product_id": "qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-img-rhev@2.6.0-27.el7?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"product": {
"name": "qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"product_id": "qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-common-rhev@2.6.0-27.el7?arch=x86_64\u0026epoch=10"
}
}
},
{
"category": "product_version",
"name": "qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"product": {
"name": "qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"product_id": "qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-rhev-debuginfo@2.6.0-27.el7?arch=x86_64\u0026epoch=10"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.src",
"product": {
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.src",
"product_id": "qemu-kvm-rhev-10:2.6.0-27.el7.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/qemu-kvm-rhev@2.6.0-27.el7?arch=src\u0026epoch=10"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-img-rhev-10:2.6.0-27.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64"
},
"product_reference": "qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64"
},
"product_reference": "qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.src as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.6.0-27.el7.src"
},
"product_reference": "qemu-kvm-rhev-10:2.6.0-27.el7.src",
"relates_to_product_reference": "7Server-RH7-RHOS-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-rhev-10:2.6.0-27.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64"
},
"product_reference": "qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64"
},
"product_reference": "qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-6.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64 as a component of Red Hat Enterprise Linux OpenStack Platform 6.0 (Juno) for RHEL 7",
"product_id": "7Server-RH7-RHOS-6.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
},
"product_reference": "qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64",
"relates_to_product_reference": "7Server-RH7-RHOS-6.0"
}
]
},
"vulnerabilities": [
{
"acknowledgments": [
{
"names": [
"Donghai Zdh"
],
"organization": "Alibaba Inc."
}
],
"cve": "CVE-2015-8817",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2016-01-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1300771"
}
],
"notes": [
{
"category": "description",
"text": "An out-of-bounds flaw was found in the QEMU emulator built using \u0027address_space_translate\u0027 to map an address to a MemoryRegionSection. The flaw could occur while doing pci_dma_read/write calls, resulting in an out-of-bounds read-write access error. A privileged user inside a guest could use this flaw to crash the guest instance (denial of service).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Qemu: OOB access in address_space_rw leads to segmentation fault",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-6.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-8817"
},
{
"category": "external",
"summary": "RHBZ#1300771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300771"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-8817",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-8817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8817"
}
],
"release_date": "2016-01-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-11-14T20:03:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.",
"product_ids": [
"7Server-RH7-RHOS-6.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:2705"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:A/AC:H/Au:S/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Server-RH7-RHOS-6.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Qemu: OOB access in address_space_rw leads to segmentation fault"
},
{
"acknowledgments": [
{
"names": [
"Donghai Zdh"
],
"organization": "Alibaba Inc."
}
],
"cve": "CVE-2015-8818",
"cwe": {
"id": "CWE-787",
"name": "Out-of-bounds Write"
},
"discovery_date": "2016-01-21T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1300771"
}
],
"notes": [
{
"category": "description",
"text": "An out-of-bounds flaw was found in the QEMU emulator built using \u0027address_space_translate\u0027 to map an address to a MemoryRegionSection. The flaw could occur while doing pci_dma_read/write calls, resulting in an out-of-bounds read-write access error. A privileged user inside a guest could use this flaw to crash the guest instance (denial of service).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Qemu: OOB access in address_space_rw leads to segmentation fault",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-6.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2015-8818"
},
{
"category": "external",
"summary": "RHBZ#1300771",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300771"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2015-8818",
"url": "https://www.cve.org/CVERecord?id=CVE-2015-8818"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2015-8818",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8818"
}
],
"release_date": "2016-01-27T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-11-14T20:03:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.",
"product_ids": [
"7Server-RH7-RHOS-6.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:2705"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "HIGH",
"accessVector": "ADJACENT_NETWORK",
"authentication": "SINGLE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.0,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"vectorString": "AV:A/AC:H/Au:S/C:P/I:P/A:P",
"version": "2.0"
},
"products": [
"7Server-RH7-RHOS-6.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Qemu: OOB access in address_space_rw leads to segmentation fault"
},
{
"acknowledgments": [
{
"names": [
"Ling Liu"
],
"organization": "Qihoo 360 Inc."
}
],
"cve": "CVE-2016-2857",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2016-01-07T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "1296567"
}
],
"notes": [
{
"category": "description",
"text": "An out-of-bounds read-access flaw was found in the QEMU emulator built with IP checksum routines. The flaw could occur when computing a TCP/UDP packet\u0027s checksum, because a QEMU function used the packet\u0027s payload length without checking against the data buffer\u0027s size. A user inside a guest could use this flaw to crash the QEMU process (denial of service).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Qemu: net: out of bounds read in net_checksum_calculate()",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This has been rated as having Low security impact and is not currently\nplanned to be addressed in future updates. For additional information, refer\nto the Red Hat Enterprise Linux Life Cycle:\nhttps://access.redhat.com/support/policy/updates/errata/.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-RH7-RHOS-6.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2016-2857"
},
{
"category": "external",
"summary": "RHBZ#1296567",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1296567"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2016-2857",
"url": "https://www.cve.org/CVERecord?id=CVE-2016-2857"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2016-2857",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2016-2857"
}
],
"release_date": "2016-02-17T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2016-11-14T20:03:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258\n\nAfter installing this update, shut down all running virtual machines. Once all virtual machines have shut down, start them again for this update to take effect.",
"product_ids": [
"7Server-RH7-RHOS-6.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2016:2705"
}
],
"scores": [
{
"cvss_v2": {
"accessComplexity": "MEDIUM",
"accessVector": "ADJACENT_NETWORK",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 4.3,
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"vectorString": "AV:A/AC:M/Au:N/C:P/I:N/A:P",
"version": "2.0"
},
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "LOW",
"baseScore": 4.7,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:L",
"version": "3.0"
},
"products": [
"7Server-RH7-RHOS-6.0:qemu-img-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-common-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.6.0-27.el7.src",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-rhev-debuginfo-10:2.6.0-27.el7.x86_64",
"7Server-RH7-RHOS-6.0:qemu-kvm-tools-rhev-10:2.6.0-27.el7.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Low"
}
],
"title": "Qemu: net: out of bounds read in net_checksum_calculate()"
}
]
}
ghsa-v5jw-2c5m-f8hv
Vulnerability from github
Published
2022-05-13 01:13
Modified
2022-05-13 01:13
Severity ?
VLAI Severity ?
Details
The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors.
{
"affected": [],
"aliases": [
"CVE-2015-8818"
],
"database_specific": {
"cwe_ids": [],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2016-12-29T22:59:00Z",
"severity": "MODERATE"
},
"details": "The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors.",
"id": "GHSA-v5jw-2c5m-f8hv",
"modified": "2022-05-13T01:13:38Z",
"published": "2022-05-13T01:13:38Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2015-8818"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2016:2670"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2016:2671"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2016:2704"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2016:2705"
},
{
"type": "WEB",
"url": "https://access.redhat.com/errata/RHSA-2016:2706"
},
{
"type": "WEB",
"url": "https://access.redhat.com/security/cve/CVE-2015-8818"
},
{
"type": "WEB",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300771"
},
{
"type": "WEB",
"url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=b242e0e0e2969c044a318e56f7988bbd84de1f63"
},
{
"type": "WEB",
"url": "http://git.qemu.org/?p=qemu.git;a=commit;h=b242e0e0e2969c044a318e56f7988bbd84de1f63"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2016-2670.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2016-2671.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2016-2704.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2016-2705.html"
},
{
"type": "WEB",
"url": "http://rhn.redhat.com/errata/RHSA-2016-2706.html"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2016/03/01/1"
},
{
"type": "WEB",
"url": "http://www.openwall.com/lists/oss-security/2016/03/01/10"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
}
]
}
fkie_cve-2015-8818
Vulnerability from fkie_nvd
Published
2016-12-29 22:59
Modified
2025-04-12 10:46
Severity ?
Summary
The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors.
References
| ▶ | URL | Tags | |
|---|---|---|---|
| secalert@redhat.com | http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=b242e0e0e2969c044a318e56f7988bbd84de1f63 | ||
| secalert@redhat.com | http://rhn.redhat.com/errata/RHSA-2016-2670.html | Third Party Advisory | |
| secalert@redhat.com | http://rhn.redhat.com/errata/RHSA-2016-2671.html | Third Party Advisory | |
| secalert@redhat.com | http://rhn.redhat.com/errata/RHSA-2016-2704.html | Third Party Advisory | |
| secalert@redhat.com | http://rhn.redhat.com/errata/RHSA-2016-2705.html | Third Party Advisory | |
| secalert@redhat.com | http://rhn.redhat.com/errata/RHSA-2016-2706.html | Third Party Advisory | |
| secalert@redhat.com | http://www.openwall.com/lists/oss-security/2016/03/01/1 | Mailing List, Third Party Advisory | |
| secalert@redhat.com | http://www.openwall.com/lists/oss-security/2016/03/01/10 | Mailing List, Third Party Advisory | |
| secalert@redhat.com | https://bugzilla.redhat.com/show_bug.cgi?id=1300771 | Issue Tracking | |
| af854a3a-2127-422b-91ae-364da2661108 | http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=b242e0e0e2969c044a318e56f7988bbd84de1f63 | ||
| af854a3a-2127-422b-91ae-364da2661108 | http://rhn.redhat.com/errata/RHSA-2016-2670.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://rhn.redhat.com/errata/RHSA-2016-2671.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://rhn.redhat.com/errata/RHSA-2016-2704.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://rhn.redhat.com/errata/RHSA-2016-2705.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://rhn.redhat.com/errata/RHSA-2016-2706.html | Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.openwall.com/lists/oss-security/2016/03/01/1 | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | http://www.openwall.com/lists/oss-security/2016/03/01/10 | Mailing List, Third Party Advisory | |
| af854a3a-2127-422b-91ae-364da2661108 | https://bugzilla.redhat.com/show_bug.cgi?id=1300771 | Issue Tracking |
{
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
"matchCriteriaId": "19E6775C-BA58-4D7E-96AB-9283C99D9641",
"versionEndIncluding": "2.3.1",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors."
},
{
"lang": "es",
"value": "La funci\u00f3n cpu_physical_memory_write_rom_internal en exec.c en QEMU (tambi\u00e9n conocido como Quick Emulator) no omite apropiadamente las regiones MMIO, lo que permite a usuarios invitados privilegiados locales provocar una denegaci\u00f3n de servicio (ca\u00edda del hu\u00e9sped) a trav\u00e9s de vectores no especificados."
}
],
"id": "CVE-2015-8818",
"lastModified": "2025-04-12T10:46:40.837",
"metrics": {
"cvssMetricV2": [
{
"acInsufInfo": false,
"baseSeverity": "LOW",
"cvssData": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.1,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"source": "nvd@nist.gov",
"type": "Primary",
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6,
"source": "nvd@nist.gov",
"type": "Primary"
}
]
},
"published": "2016-12-29T22:59:00.340",
"references": [
{
"source": "secalert@redhat.com",
"url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=b242e0e0e2969c044a318e56f7988bbd84de1f63"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2670.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2671.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2704.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2705.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2706.html"
},
{
"source": "secalert@redhat.com",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://www.openwall.com/lists/oss-security/2016/03/01/1"
},
{
"source": "secalert@redhat.com",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://www.openwall.com/lists/oss-security/2016/03/01/10"
},
{
"source": "secalert@redhat.com",
"tags": [
"Issue Tracking"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300771"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=b242e0e0e2969c044a318e56f7988bbd84de1f63"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2670.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2671.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2704.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2705.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2706.html"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://www.openwall.com/lists/oss-security/2016/03/01/1"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://www.openwall.com/lists/oss-security/2016/03/01/10"
},
{
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Issue Tracking"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300771"
}
],
"sourceIdentifier": "secalert@redhat.com",
"vulnStatus": "Deferred",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
],
"source": "nvd@nist.gov",
"type": "Primary"
}
]
}
suse-su-2016:1703-1
Vulnerability from csaf_suse
Published
2016-06-29 05:47
Modified
2016-06-29 05:47
Summary
Security update for qemu
Notes
Title of the patch
Security update for qemu
Description of the patch
qemu was updated to fix 29 security issues.
These security issues were fixed:
- CVE-2016-4439: Avoid OOB access in 53C9X emulation (bsc#980711)
- CVE-2016-4441: Avoid OOB access in 53C9X emulation (bsc#980723)
- CVE-2016-4952: Avoid OOB access in Vmware PV SCSI emulation (bsc#981266)
- CVE-2015-8817: Avoid OOB access in PCI dma I/O (bsc#969121)
- CVE-2015-8818: Avoid OOB access in PCI dma I/O (bsc#969122)
- CVE-2016-3710: Fixed VGA emulation based OOB access with potential for guest escape (bsc#978158)
- CVE-2016-3712: Fixed VGa emulation based DOS and OOB read access exploit (bsc#978160)
- CVE-2016-4037: Fixed USB ehci based DOS (bsc#976109)
- CVE-2016-2538: Fixed potential OOB access in USB net device emulation (bsc#967969)
- CVE-2016-2841: Fixed OOB access / hang in ne2000 emulation (bsc#969350)
- CVE-2016-2858: Avoid potential DOS when using QEMU pseudo random number generator (bsc#970036)
- CVE-2016-2857: Fixed OOB access when processing IP checksums (bsc#970037)
- CVE-2016-4001: Fixed OOB access in Stellaris enet emulated nic (bsc#975128)
- CVE-2016-4002: Fixed OOB access in MIPSnet emulated controller (bsc#975136)
- CVE-2016-4020: Fixed possible host data leakage to guest from TPR access (bsc#975700)
- CVE-2016-2197: Prevent AHCI NULL pointer dereference when using FIS CLB engine (bsc#964411)
- CVE-2015-5745: Buffer overflow in virtio-serial (bsc#940929).
- CVE-2015-7549: PCI null pointer dereferences (bsc#958917).
- CVE-2015-8504: VNC floating point exception (bsc#958491).
- CVE-2015-8558: Infinite loop in ehci_advance_state resulting in DoS (bsc#959005).
- CVE-2015-8567: A guest repeatedly activating a vmxnet3 device can leak host memory (bsc#959386).
- CVE-2015-8568: A guest repeatedly activating a vmxnet3 device can leak host memory (bsc#959386).
- CVE-2015-8613: Wrong sized memset in megasas command handler (bsc#961358).
- CVE-2015-8619: Potential DoS for long HMP sendkey command argument (bsc#960334).
- CVE-2015-8743: OOB memory access in ne2000 ioport r/w functions (bsc#960725).
- CVE-2015-8744: Incorrect l2 header validation could have lead to a crash via assert(2) call (bsc#960835).
- CVE-2015-8745: Reading IMR registers could have lead to a crash via assert(2) call (bsc#960708).
- CVE-2016-1568: AHCI use-after-free in aio port commands (bsc#961332).
- CVE-2016-1714: Potential OOB memory access in processing firmware configuration (bsc#961691).
- CVE-2016-1922: NULL pointer dereference when processing hmp i/o command (bsc#962320).
- CVE-2016-1981: Potential DoS (infinite loop) in e1000 device emulation by malicious privileged user within guest (bsc#963782).
- CVE-2016-2198: Malicious privileged guest user were able to cause DoS by writing to read-only EHCI capabilities registers (bsc#964413).
This non-security issue was fixed
- bsc#886378: qemu truncates vhd images in virt-rescue
Patchnames
SUSE-SLE-DESKTOP-12-SP1-2016-1007,SUSE-SLE-SERVER-12-SP1-2016-1007
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for qemu",
"title": "Title of the patch"
},
{
"category": "description",
"text": "qemu was updated to fix 29 security issues.\n\nThese security issues were fixed:\n- CVE-2016-4439: Avoid OOB access in 53C9X emulation (bsc#980711)\n- CVE-2016-4441: Avoid OOB access in 53C9X emulation (bsc#980723)\n- CVE-2016-4952: Avoid OOB access in Vmware PV SCSI emulation (bsc#981266)\n- CVE-2015-8817: Avoid OOB access in PCI dma I/O (bsc#969121)\n- CVE-2015-8818: Avoid OOB access in PCI dma I/O (bsc#969122)\n- CVE-2016-3710: Fixed VGA emulation based OOB access with potential for guest escape (bsc#978158)\n- CVE-2016-3712: Fixed VGa emulation based DOS and OOB read access exploit (bsc#978160)\n- CVE-2016-4037: Fixed USB ehci based DOS (bsc#976109)\n- CVE-2016-2538: Fixed potential OOB access in USB net device emulation (bsc#967969)\n- CVE-2016-2841: Fixed OOB access / hang in ne2000 emulation (bsc#969350)\n- CVE-2016-2858: Avoid potential DOS when using QEMU pseudo random number generator (bsc#970036)\n- CVE-2016-2857: Fixed OOB access when processing IP checksums (bsc#970037)\n- CVE-2016-4001: Fixed OOB access in Stellaris enet emulated nic (bsc#975128)\n- CVE-2016-4002: Fixed OOB access in MIPSnet emulated controller (bsc#975136)\n- CVE-2016-4020: Fixed possible host data leakage to guest from TPR access (bsc#975700)\n- CVE-2016-2197: Prevent AHCI NULL pointer dereference when using FIS CLB engine (bsc#964411)\n- CVE-2015-5745: Buffer overflow in virtio-serial (bsc#940929).\n- CVE-2015-7549: PCI null pointer dereferences (bsc#958917).\n- CVE-2015-8504: VNC floating point exception (bsc#958491).\n- CVE-2015-8558: Infinite loop in ehci_advance_state resulting in DoS (bsc#959005).\n- CVE-2015-8567: A guest repeatedly activating a vmxnet3 device can leak host memory (bsc#959386).\n- CVE-2015-8568: A guest repeatedly activating a vmxnet3 device can leak host memory (bsc#959386).\n- CVE-2015-8613: Wrong sized memset in megasas command handler (bsc#961358).\n- CVE-2015-8619: Potential DoS for long HMP sendkey command argument (bsc#960334).\n- CVE-2015-8743: OOB memory access in ne2000 ioport r/w functions (bsc#960725).\n- CVE-2015-8744: Incorrect l2 header validation could have lead to a crash via assert(2) call (bsc#960835).\n- CVE-2015-8745: Reading IMR registers could have lead to a crash via assert(2) call (bsc#960708).\n- CVE-2016-1568: AHCI use-after-free in aio port commands (bsc#961332).\n- CVE-2016-1714: Potential OOB memory access in processing firmware configuration (bsc#961691).\n- CVE-2016-1922: NULL pointer dereference when processing hmp i/o command (bsc#962320).\n- CVE-2016-1981: Potential DoS (infinite loop) in e1000 device emulation by malicious privileged user within guest (bsc#963782).\n- CVE-2016-2198: Malicious privileged guest user were able to cause DoS by writing to read-only EHCI capabilities registers (bsc#964413).\n\nThis non-security issue was fixed\n- bsc#886378: qemu truncates vhd images in virt-rescue\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-DESKTOP-12-SP1-2016-1007,SUSE-SLE-SERVER-12-SP1-2016-1007",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_1703-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2016:1703-1",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20161703-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2016:1703-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2016-June/002141.html"
},
{
"category": "self",
"summary": "SUSE Bug 886378",
"url": "https://bugzilla.suse.com/886378"
},
{
"category": "self",
"summary": "SUSE Bug 940929",
"url": "https://bugzilla.suse.com/940929"
},
{
"category": "self",
"summary": "SUSE Bug 958491",
"url": "https://bugzilla.suse.com/958491"
},
{
"category": "self",
"summary": "SUSE Bug 958917",
"url": "https://bugzilla.suse.com/958917"
},
{
"category": "self",
"summary": "SUSE Bug 959005",
"url": "https://bugzilla.suse.com/959005"
},
{
"category": "self",
"summary": "SUSE Bug 959386",
"url": "https://bugzilla.suse.com/959386"
},
{
"category": "self",
"summary": "SUSE Bug 960334",
"url": "https://bugzilla.suse.com/960334"
},
{
"category": "self",
"summary": "SUSE Bug 960708",
"url": "https://bugzilla.suse.com/960708"
},
{
"category": "self",
"summary": "SUSE Bug 960725",
"url": "https://bugzilla.suse.com/960725"
},
{
"category": "self",
"summary": "SUSE Bug 960835",
"url": "https://bugzilla.suse.com/960835"
},
{
"category": "self",
"summary": "SUSE Bug 961332",
"url": "https://bugzilla.suse.com/961332"
},
{
"category": "self",
"summary": "SUSE Bug 961333",
"url": "https://bugzilla.suse.com/961333"
},
{
"category": "self",
"summary": "SUSE Bug 961358",
"url": "https://bugzilla.suse.com/961358"
},
{
"category": "self",
"summary": "SUSE Bug 961556",
"url": "https://bugzilla.suse.com/961556"
},
{
"category": "self",
"summary": "SUSE Bug 961691",
"url": "https://bugzilla.suse.com/961691"
},
{
"category": "self",
"summary": "SUSE Bug 962320",
"url": "https://bugzilla.suse.com/962320"
},
{
"category": "self",
"summary": "SUSE Bug 963782",
"url": "https://bugzilla.suse.com/963782"
},
{
"category": "self",
"summary": "SUSE Bug 964411",
"url": "https://bugzilla.suse.com/964411"
},
{
"category": "self",
"summary": "SUSE Bug 964413",
"url": "https://bugzilla.suse.com/964413"
},
{
"category": "self",
"summary": "SUSE Bug 967969",
"url": "https://bugzilla.suse.com/967969"
},
{
"category": "self",
"summary": "SUSE Bug 969121",
"url": "https://bugzilla.suse.com/969121"
},
{
"category": "self",
"summary": "SUSE Bug 969122",
"url": "https://bugzilla.suse.com/969122"
},
{
"category": "self",
"summary": "SUSE Bug 969350",
"url": "https://bugzilla.suse.com/969350"
},
{
"category": "self",
"summary": "SUSE Bug 970036",
"url": "https://bugzilla.suse.com/970036"
},
{
"category": "self",
"summary": "SUSE Bug 970037",
"url": "https://bugzilla.suse.com/970037"
},
{
"category": "self",
"summary": "SUSE Bug 975128",
"url": "https://bugzilla.suse.com/975128"
},
{
"category": "self",
"summary": "SUSE Bug 975136",
"url": "https://bugzilla.suse.com/975136"
},
{
"category": "self",
"summary": "SUSE Bug 975700",
"url": "https://bugzilla.suse.com/975700"
},
{
"category": "self",
"summary": "SUSE Bug 976109",
"url": "https://bugzilla.suse.com/976109"
},
{
"category": "self",
"summary": "SUSE Bug 978158",
"url": "https://bugzilla.suse.com/978158"
},
{
"category": "self",
"summary": "SUSE Bug 978160",
"url": "https://bugzilla.suse.com/978160"
},
{
"category": "self",
"summary": "SUSE Bug 980711",
"url": "https://bugzilla.suse.com/980711"
},
{
"category": "self",
"summary": "SUSE Bug 980723",
"url": "https://bugzilla.suse.com/980723"
},
{
"category": "self",
"summary": "SUSE Bug 981266",
"url": "https://bugzilla.suse.com/981266"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5745 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7549 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7549/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8504 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8504/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8558 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8558/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8567 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8567/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8568 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8568/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8613 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8613/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8619 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8619/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8743 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8743/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8744 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8744/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8745 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8817 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8818 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1568 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1568/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1714 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1714/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1922 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1922/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1981 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1981/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2197 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2197/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2198 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2198/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2538 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2538/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2841 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2841/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2857 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2857/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2858 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2858/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-3710 page",
"url": "https://www.suse.com/security/cve/CVE-2016-3710/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-3712 page",
"url": "https://www.suse.com/security/cve/CVE-2016-3712/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4001 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4001/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4002 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4002/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4020 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4037 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4037/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4439 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4439/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4441 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4441/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4952 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4952/"
}
],
"title": "Security update for qemu",
"tracking": {
"current_release_date": "2016-06-29T05:47:55Z",
"generator": {
"date": "2016-06-29T05:47:55Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2016:1703-1",
"initial_release_date": "2016-06-29T05:47:55Z",
"revision_history": [
{
"date": "2016-06-29T05:47:55Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "qemu-ipxe-1.0.0-14.1.noarch",
"product": {
"name": "qemu-ipxe-1.0.0-14.1.noarch",
"product_id": "qemu-ipxe-1.0.0-14.1.noarch"
}
},
{
"category": "product_version",
"name": "qemu-seabios-1.8.1-14.1.noarch",
"product": {
"name": "qemu-seabios-1.8.1-14.1.noarch",
"product_id": "qemu-seabios-1.8.1-14.1.noarch"
}
},
{
"category": "product_version",
"name": "qemu-sgabios-8-14.1.noarch",
"product": {
"name": "qemu-sgabios-8-14.1.noarch",
"product_id": "qemu-sgabios-8-14.1.noarch"
}
},
{
"category": "product_version",
"name": "qemu-vgabios-1.8.1-14.1.noarch",
"product": {
"name": "qemu-vgabios-1.8.1-14.1.noarch",
"product_id": "qemu-vgabios-1.8.1-14.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-2.3.1-14.1.ppc64le",
"product": {
"name": "qemu-2.3.1-14.1.ppc64le",
"product_id": "qemu-2.3.1-14.1.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-block-curl-2.3.1-14.1.ppc64le",
"product": {
"name": "qemu-block-curl-2.3.1-14.1.ppc64le",
"product_id": "qemu-block-curl-2.3.1-14.1.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-guest-agent-2.3.1-14.1.ppc64le",
"product": {
"name": "qemu-guest-agent-2.3.1-14.1.ppc64le",
"product_id": "qemu-guest-agent-2.3.1-14.1.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-lang-2.3.1-14.1.ppc64le",
"product": {
"name": "qemu-lang-2.3.1-14.1.ppc64le",
"product_id": "qemu-lang-2.3.1-14.1.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-ppc-2.3.1-14.1.ppc64le",
"product": {
"name": "qemu-ppc-2.3.1-14.1.ppc64le",
"product_id": "qemu-ppc-2.3.1-14.1.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-tools-2.3.1-14.1.ppc64le",
"product": {
"name": "qemu-tools-2.3.1-14.1.ppc64le",
"product_id": "qemu-tools-2.3.1-14.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-2.3.1-14.1.s390x",
"product": {
"name": "qemu-2.3.1-14.1.s390x",
"product_id": "qemu-2.3.1-14.1.s390x"
}
},
{
"category": "product_version",
"name": "qemu-block-curl-2.3.1-14.1.s390x",
"product": {
"name": "qemu-block-curl-2.3.1-14.1.s390x",
"product_id": "qemu-block-curl-2.3.1-14.1.s390x"
}
},
{
"category": "product_version",
"name": "qemu-guest-agent-2.3.1-14.1.s390x",
"product": {
"name": "qemu-guest-agent-2.3.1-14.1.s390x",
"product_id": "qemu-guest-agent-2.3.1-14.1.s390x"
}
},
{
"category": "product_version",
"name": "qemu-kvm-2.3.1-14.1.s390x",
"product": {
"name": "qemu-kvm-2.3.1-14.1.s390x",
"product_id": "qemu-kvm-2.3.1-14.1.s390x"
}
},
{
"category": "product_version",
"name": "qemu-lang-2.3.1-14.1.s390x",
"product": {
"name": "qemu-lang-2.3.1-14.1.s390x",
"product_id": "qemu-lang-2.3.1-14.1.s390x"
}
},
{
"category": "product_version",
"name": "qemu-s390-2.3.1-14.1.s390x",
"product": {
"name": "qemu-s390-2.3.1-14.1.s390x",
"product_id": "qemu-s390-2.3.1-14.1.s390x"
}
},
{
"category": "product_version",
"name": "qemu-tools-2.3.1-14.1.s390x",
"product": {
"name": "qemu-tools-2.3.1-14.1.s390x",
"product_id": "qemu-tools-2.3.1-14.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-2.3.1-14.1.x86_64",
"product": {
"name": "qemu-2.3.1-14.1.x86_64",
"product_id": "qemu-2.3.1-14.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-block-curl-2.3.1-14.1.x86_64",
"product": {
"name": "qemu-block-curl-2.3.1-14.1.x86_64",
"product_id": "qemu-block-curl-2.3.1-14.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-kvm-2.3.1-14.1.x86_64",
"product": {
"name": "qemu-kvm-2.3.1-14.1.x86_64",
"product_id": "qemu-kvm-2.3.1-14.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-tools-2.3.1-14.1.x86_64",
"product": {
"name": "qemu-tools-2.3.1-14.1.x86_64",
"product_id": "qemu-tools-2.3.1-14.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-x86-2.3.1-14.1.x86_64",
"product": {
"name": "qemu-x86-2.3.1-14.1.x86_64",
"product_id": "qemu-x86-2.3.1-14.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-block-rbd-2.3.1-14.1.x86_64",
"product": {
"name": "qemu-block-rbd-2.3.1-14.1.x86_64",
"product_id": "qemu-block-rbd-2.3.1-14.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-guest-agent-2.3.1-14.1.x86_64",
"product": {
"name": "qemu-guest-agent-2.3.1-14.1.x86_64",
"product_id": "qemu-guest-agent-2.3.1-14.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-lang-2.3.1-14.1.x86_64",
"product": {
"name": "qemu-lang-2.3.1-14.1.x86_64",
"product_id": "qemu-lang-2.3.1-14.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-2.3.1-14.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64"
},
"product_reference": "qemu-2.3.1-14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-curl-2.3.1-14.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64"
},
"product_reference": "qemu-block-curl-2.3.1-14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ipxe-1.0.0-14.1.noarch as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch"
},
"product_reference": "qemu-ipxe-1.0.0-14.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-2.3.1-14.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64"
},
"product_reference": "qemu-kvm-2.3.1-14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-seabios-1.8.1-14.1.noarch as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch"
},
"product_reference": "qemu-seabios-1.8.1-14.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-sgabios-8-14.1.noarch as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch"
},
"product_reference": "qemu-sgabios-8-14.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-tools-2.3.1-14.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64"
},
"product_reference": "qemu-tools-2.3.1-14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-vgabios-1.8.1-14.1.noarch as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch"
},
"product_reference": "qemu-vgabios-1.8.1-14.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-x86-2.3.1-14.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
},
"product_reference": "qemu-x86-2.3.1-14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-2.3.1-14.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le"
},
"product_reference": "qemu-2.3.1-14.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-2.3.1-14.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x"
},
"product_reference": "qemu-2.3.1-14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-2.3.1-14.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64"
},
"product_reference": "qemu-2.3.1-14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-curl-2.3.1-14.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le"
},
"product_reference": "qemu-block-curl-2.3.1-14.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-curl-2.3.1-14.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x"
},
"product_reference": "qemu-block-curl-2.3.1-14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-curl-2.3.1-14.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64"
},
"product_reference": "qemu-block-curl-2.3.1-14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-rbd-2.3.1-14.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64"
},
"product_reference": "qemu-block-rbd-2.3.1-14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-2.3.1-14.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le"
},
"product_reference": "qemu-guest-agent-2.3.1-14.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-2.3.1-14.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x"
},
"product_reference": "qemu-guest-agent-2.3.1-14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-2.3.1-14.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64"
},
"product_reference": "qemu-guest-agent-2.3.1-14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ipxe-1.0.0-14.1.noarch as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch"
},
"product_reference": "qemu-ipxe-1.0.0-14.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-2.3.1-14.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x"
},
"product_reference": "qemu-kvm-2.3.1-14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-2.3.1-14.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64"
},
"product_reference": "qemu-kvm-2.3.1-14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-lang-2.3.1-14.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le"
},
"product_reference": "qemu-lang-2.3.1-14.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-lang-2.3.1-14.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x"
},
"product_reference": "qemu-lang-2.3.1-14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-lang-2.3.1-14.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64"
},
"product_reference": "qemu-lang-2.3.1-14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ppc-2.3.1-14.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le"
},
"product_reference": "qemu-ppc-2.3.1-14.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-s390-2.3.1-14.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x"
},
"product_reference": "qemu-s390-2.3.1-14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-seabios-1.8.1-14.1.noarch as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch"
},
"product_reference": "qemu-seabios-1.8.1-14.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-sgabios-8-14.1.noarch as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch"
},
"product_reference": "qemu-sgabios-8-14.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-tools-2.3.1-14.1.ppc64le as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le"
},
"product_reference": "qemu-tools-2.3.1-14.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-tools-2.3.1-14.1.s390x as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x"
},
"product_reference": "qemu-tools-2.3.1-14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-tools-2.3.1-14.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64"
},
"product_reference": "qemu-tools-2.3.1-14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-vgabios-1.8.1-14.1.noarch as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch"
},
"product_reference": "qemu-vgabios-1.8.1-14.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-x86-2.3.1-14.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
},
"product_reference": "qemu-x86-2.3.1-14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-2.3.1-14.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le"
},
"product_reference": "qemu-2.3.1-14.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-2.3.1-14.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x"
},
"product_reference": "qemu-2.3.1-14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-2.3.1-14.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64"
},
"product_reference": "qemu-2.3.1-14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-curl-2.3.1-14.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le"
},
"product_reference": "qemu-block-curl-2.3.1-14.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-curl-2.3.1-14.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x"
},
"product_reference": "qemu-block-curl-2.3.1-14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-curl-2.3.1-14.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64"
},
"product_reference": "qemu-block-curl-2.3.1-14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-rbd-2.3.1-14.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64"
},
"product_reference": "qemu-block-rbd-2.3.1-14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-2.3.1-14.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le"
},
"product_reference": "qemu-guest-agent-2.3.1-14.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-2.3.1-14.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x"
},
"product_reference": "qemu-guest-agent-2.3.1-14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-2.3.1-14.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64"
},
"product_reference": "qemu-guest-agent-2.3.1-14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ipxe-1.0.0-14.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch"
},
"product_reference": "qemu-ipxe-1.0.0-14.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-2.3.1-14.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x"
},
"product_reference": "qemu-kvm-2.3.1-14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-2.3.1-14.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64"
},
"product_reference": "qemu-kvm-2.3.1-14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-lang-2.3.1-14.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le"
},
"product_reference": "qemu-lang-2.3.1-14.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-lang-2.3.1-14.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x"
},
"product_reference": "qemu-lang-2.3.1-14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-lang-2.3.1-14.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64"
},
"product_reference": "qemu-lang-2.3.1-14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ppc-2.3.1-14.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le"
},
"product_reference": "qemu-ppc-2.3.1-14.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-s390-2.3.1-14.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x"
},
"product_reference": "qemu-s390-2.3.1-14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-seabios-1.8.1-14.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch"
},
"product_reference": "qemu-seabios-1.8.1-14.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-sgabios-8-14.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch"
},
"product_reference": "qemu-sgabios-8-14.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-tools-2.3.1-14.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le"
},
"product_reference": "qemu-tools-2.3.1-14.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-tools-2.3.1-14.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x"
},
"product_reference": "qemu-tools-2.3.1-14.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-tools-2.3.1-14.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64"
},
"product_reference": "qemu-tools-2.3.1-14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-vgabios-1.8.1-14.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch"
},
"product_reference": "qemu-vgabios-1.8.1-14.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-x86-2.3.1-14.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
},
"product_reference": "qemu-x86-2.3.1-14.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2015-5745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5745"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users to cause a denial of service (QEMU process crash) via a crafted virtio control message.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5745",
"url": "https://www.suse.com/security/cve/CVE-2015-5745"
},
{
"category": "external",
"summary": "SUSE Bug 940929 for CVE-2015-5745",
"url": "https://bugzilla.suse.com/940929"
},
{
"category": "external",
"summary": "SUSE Bug 950367 for CVE-2015-5745",
"url": "https://bugzilla.suse.com/950367"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "low"
}
],
"title": "CVE-2015-5745"
},
{
"cve": "CVE-2015-7549",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7549"
}
],
"notes": [
{
"category": "general",
"text": "The MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by leveraging failure to define the .write method.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7549",
"url": "https://www.suse.com/security/cve/CVE-2015-7549"
},
{
"category": "external",
"summary": "SUSE Bug 958917 for CVE-2015-7549",
"url": "https://bugzilla.suse.com/958917"
},
{
"category": "external",
"summary": "SUSE Bug 958918 for CVE-2015-7549",
"url": "https://bugzilla.suse.com/958918"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "low"
}
],
"title": "CVE-2015-7549"
},
{
"cve": "CVE-2015-8504",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8504"
}
],
"notes": [
{
"category": "general",
"text": "Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service (arithmetic exception and application crash) via crafted SetPixelFormat messages from a client.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8504",
"url": "https://www.suse.com/security/cve/CVE-2015-8504"
},
{
"category": "external",
"summary": "SUSE Bug 958491 for CVE-2015-8504",
"url": "https://bugzilla.suse.com/958491"
},
{
"category": "external",
"summary": "SUSE Bug 958493 for CVE-2015-8504",
"url": "https://bugzilla.suse.com/958493"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "moderate"
}
],
"title": "CVE-2015-8504"
},
{
"cve": "CVE-2015-8558",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8558"
}
],
"notes": [
{
"category": "general",
"text": "The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular isochronous transfer descriptor (iTD) list.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8558",
"url": "https://www.suse.com/security/cve/CVE-2015-8558"
},
{
"category": "external",
"summary": "SUSE Bug 959005 for CVE-2015-8558",
"url": "https://bugzilla.suse.com/959005"
},
{
"category": "external",
"summary": "SUSE Bug 959006 for CVE-2015-8558",
"url": "https://bugzilla.suse.com/959006"
},
{
"category": "external",
"summary": "SUSE Bug 976109 for CVE-2015-8558",
"url": "https://bugzilla.suse.com/976109"
},
{
"category": "external",
"summary": "SUSE Bug 976111 for CVE-2015-8558",
"url": "https://bugzilla.suse.com/976111"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "moderate"
}
],
"title": "CVE-2015-8558"
},
{
"cve": "CVE-2015-8567",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8567"
}
],
"notes": [
{
"category": "general",
"text": "Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8567",
"url": "https://www.suse.com/security/cve/CVE-2015-8567"
},
{
"category": "external",
"summary": "SUSE Bug 959386 for CVE-2015-8567",
"url": "https://bugzilla.suse.com/959386"
},
{
"category": "external",
"summary": "SUSE Bug 959387 for CVE-2015-8567",
"url": "https://bugzilla.suse.com/959387"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "low"
}
],
"title": "CVE-2015-8567"
},
{
"cve": "CVE-2015-8568",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8568"
}
],
"notes": [
{
"category": "general",
"text": "Memory leak in QEMU, when built with a VMWARE VMXNET3 paravirtual NIC emulator support, allows local guest users to cause a denial of service (host memory consumption) by trying to activate the vmxnet3 device repeatedly.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8568",
"url": "https://www.suse.com/security/cve/CVE-2015-8568"
},
{
"category": "external",
"summary": "SUSE Bug 959386 for CVE-2015-8568",
"url": "https://bugzilla.suse.com/959386"
},
{
"category": "external",
"summary": "SUSE Bug 959387 for CVE-2015-8568",
"url": "https://bugzilla.suse.com/959387"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "low"
}
],
"title": "CVE-2015-8568"
},
{
"cve": "CVE-2015-8613",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8613"
}
],
"notes": [
{
"category": "general",
"text": "Stack-based buffer overflow in the megasas_ctrl_get_info function in QEMU, when built with SCSI MegaRAID SAS HBA emulation support, allows local guest users to cause a denial of service (QEMU instance crash) via a crafted SCSI controller CTRL_GET_INFO command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8613",
"url": "https://www.suse.com/security/cve/CVE-2015-8613"
},
{
"category": "external",
"summary": "SUSE Bug 961358 for CVE-2015-8613",
"url": "https://bugzilla.suse.com/961358"
},
{
"category": "external",
"summary": "SUSE Bug 961556 for CVE-2015-8613",
"url": "https://bugzilla.suse.com/961556"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "moderate"
}
],
"title": "CVE-2015-8613"
},
{
"cve": "CVE-2015-8619",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8619"
}
],
"notes": [
{
"category": "general",
"text": "The Human Monitor Interface support in QEMU allows remote attackers to cause a denial of service (out-of-bounds write and application crash).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8619",
"url": "https://www.suse.com/security/cve/CVE-2015-8619"
},
{
"category": "external",
"summary": "SUSE Bug 960334 for CVE-2015-8619",
"url": "https://bugzilla.suse.com/960334"
},
{
"category": "external",
"summary": "SUSE Bug 965269 for CVE-2015-8619",
"url": "https://bugzilla.suse.com/965269"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "important"
}
],
"title": "CVE-2015-8619"
},
{
"cve": "CVE-2015-8743",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8743"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing \u0027ioport\u0027 r/w operations. A privileged (CAP_SYS_RAWIO) user/process could use this flaw to leak or corrupt QEMU memory bytes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8743",
"url": "https://www.suse.com/security/cve/CVE-2015-8743"
},
{
"category": "external",
"summary": "SUSE Bug 960725 for CVE-2015-8743",
"url": "https://bugzilla.suse.com/960725"
},
{
"category": "external",
"summary": "SUSE Bug 960726 for CVE-2015-8743",
"url": "https://bugzilla.suse.com/960726"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "moderate"
}
],
"title": "CVE-2015-8743"
},
{
"cve": "CVE-2015-8744",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8744"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It occurs when a guest sends a Layer-2 packet smaller than 22 bytes. A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8744",
"url": "https://www.suse.com/security/cve/CVE-2015-8744"
},
{
"category": "external",
"summary": "SUSE Bug 960835 for CVE-2015-8744",
"url": "https://bugzilla.suse.com/960835"
},
{
"category": "external",
"summary": "SUSE Bug 960836 for CVE-2015-8744",
"url": "https://bugzilla.suse.com/960836"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "low"
}
],
"title": "CVE-2015-8744"
},
{
"cve": "CVE-2015-8745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8745"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It could occur while reading Interrupt Mask Registers (IMR). A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8745",
"url": "https://www.suse.com/security/cve/CVE-2015-8745"
},
{
"category": "external",
"summary": "SUSE Bug 960707 for CVE-2015-8745",
"url": "https://bugzilla.suse.com/960707"
},
{
"category": "external",
"summary": "SUSE Bug 960708 for CVE-2015-8745",
"url": "https://bugzilla.suse.com/960708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "low"
}
],
"title": "CVE-2015-8745"
},
{
"cve": "CVE-2015-8817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8817"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built to use \u0027address_space_translate\u0027 to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pci_dma_read/write calls. Affects QEMU versions \u003e= 1.6.0 and \u003c= 2.3.1. A privileged user inside guest could use this flaw to crash the guest instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8817",
"url": "https://www.suse.com/security/cve/CVE-2015-8817"
},
{
"category": "external",
"summary": "SUSE Bug 969121 for CVE-2015-8817",
"url": "https://bugzilla.suse.com/969121"
},
{
"category": "external",
"summary": "SUSE Bug 969122 for CVE-2015-8817",
"url": "https://bugzilla.suse.com/969122"
},
{
"category": "external",
"summary": "SUSE Bug 969125 for CVE-2015-8817",
"url": "https://bugzilla.suse.com/969125"
},
{
"category": "external",
"summary": "SUSE Bug 969126 for CVE-2015-8817",
"url": "https://bugzilla.suse.com/969126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "moderate"
}
],
"title": "CVE-2015-8817"
},
{
"cve": "CVE-2015-8818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8818"
}
],
"notes": [
{
"category": "general",
"text": "The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8818",
"url": "https://www.suse.com/security/cve/CVE-2015-8818"
},
{
"category": "external",
"summary": "SUSE Bug 969122 for CVE-2015-8818",
"url": "https://bugzilla.suse.com/969122"
},
{
"category": "external",
"summary": "SUSE Bug 969125 for CVE-2015-8818",
"url": "https://bugzilla.suse.com/969125"
},
{
"category": "external",
"summary": "SUSE Bug 969126 for CVE-2015-8818",
"url": "https://bugzilla.suse.com/969126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "moderate"
}
],
"title": "CVE-2015-8818"
},
{
"cve": "CVE-2016-1568",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1568"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHCI Native Command Queuing (NCQ) AIO command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1568",
"url": "https://www.suse.com/security/cve/CVE-2016-1568"
},
{
"category": "external",
"summary": "SUSE Bug 961332 for CVE-2016-1568",
"url": "https://bugzilla.suse.com/961332"
},
{
"category": "external",
"summary": "SUSE Bug 961333 for CVE-2016-1568",
"url": "https://bugzilla.suse.com/961333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "moderate"
}
],
"title": "CVE-2016-1568"
},
{
"cve": "CVE-2016-1714",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1714"
}
],
"notes": [
{
"category": "general",
"text": "The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAP_SYS_RAWIO privilege to cause a denial of service (out-of-bounds read or write access and process crash) or possibly execute arbitrary code via an invalid current entry value in a firmware configuration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1714",
"url": "https://www.suse.com/security/cve/CVE-2016-1714"
},
{
"category": "external",
"summary": "SUSE Bug 961691 for CVE-2016-1714",
"url": "https://bugzilla.suse.com/961691"
},
{
"category": "external",
"summary": "SUSE Bug 961692 for CVE-2016-1714",
"url": "https://bugzilla.suse.com/961692"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "moderate"
}
],
"title": "CVE-2016-1714"
},
{
"cve": "CVE-2016-1922",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1922"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp interface. In that, \u0027current_cpu\u0027 remains null, which leads to the null pointer dereference. A user or process could use this flaw to crash the QEMU instance, resulting in DoS issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1922",
"url": "https://www.suse.com/security/cve/CVE-2016-1922"
},
{
"category": "external",
"summary": "SUSE Bug 962320 for CVE-2016-1922",
"url": "https://bugzilla.suse.com/962320"
},
{
"category": "external",
"summary": "SUSE Bug 962321 for CVE-2016-1922",
"url": "https://bugzilla.suse.com/962321"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "low"
}
],
"title": "CVE-2016-1922"
},
{
"cve": "CVE-2016-1981",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1981"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue. It could occur while processing data via transmit or receive descriptors, provided the initial receive/transmit descriptor head (TDH/RDH) is set outside the allocated descriptor buffer. A privileged user inside guest could use this flaw to crash the QEMU instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1981",
"url": "https://www.suse.com/security/cve/CVE-2016-1981"
},
{
"category": "external",
"summary": "SUSE Bug 963782 for CVE-2016-1981",
"url": "https://bugzilla.suse.com/963782"
},
{
"category": "external",
"summary": "SUSE Bug 963783 for CVE-2016-1981",
"url": "https://bugzilla.suse.com/963783"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "low"
}
],
"title": "CVE-2016-1981"
},
{
"cve": "CVE-2016-2197",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2197"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with an IDE AHCI emulation support is vulnerable to a null pointer dereference flaw. It occurs while unmapping the Frame Information Structure (FIS) and Command List Block (CLB) entries. A privileged user inside guest could use this flaw to crash the QEMU process instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2197",
"url": "https://www.suse.com/security/cve/CVE-2016-2197"
},
{
"category": "external",
"summary": "SUSE Bug 964411 for CVE-2016-2197",
"url": "https://bugzilla.suse.com/964411"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "low"
}
],
"title": "CVE-2016-2197"
},
{
"cve": "CVE-2016-2198",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2198"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null pointer dereference flaw. It could occur when an application attempts to write to EHCI capabilities registers. A privileged user inside quest could use this flaw to crash the QEMU process instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2198",
"url": "https://www.suse.com/security/cve/CVE-2016-2198"
},
{
"category": "external",
"summary": "SUSE Bug 964413 for CVE-2016-2198",
"url": "https://bugzilla.suse.com/964413"
},
{
"category": "external",
"summary": "SUSE Bug 964415 for CVE-2016-2198",
"url": "https://bugzilla.suse.com/964415"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "low"
}
],
"title": "CVE-2016-2198"
},
{
"cve": "CVE-2016-2538",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2538"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 allow local guest OS administrators to cause a denial of service (QEMU process crash) or obtain sensitive host memory information via a remote NDIS control message packet that is mishandled in the (1) rndis_query_response, (2) rndis_set_response, or (3) usb_net_handle_dataout function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2538",
"url": "https://www.suse.com/security/cve/CVE-2016-2538"
},
{
"category": "external",
"summary": "SUSE Bug 967969 for CVE-2016-2538",
"url": "https://bugzilla.suse.com/967969"
},
{
"category": "external",
"summary": "SUSE Bug 968004 for CVE-2016-2538",
"url": "https://bugzilla.suse.com/968004"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "important"
}
],
"title": "CVE-2016-2538"
},
{
"cve": "CVE-2016-2841",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2841"
}
],
"notes": [
{
"category": "general",
"text": "The ne2000_receive function in the NE2000 NIC emulation support (hw/net/ne2000.c) in QEMU before 2.5.1 allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via crafted values for the PSTART and PSTOP registers, involving ring buffer control.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2841",
"url": "https://www.suse.com/security/cve/CVE-2016-2841"
},
{
"category": "external",
"summary": "SUSE Bug 969350 for CVE-2016-2841",
"url": "https://bugzilla.suse.com/969350"
},
{
"category": "external",
"summary": "SUSE Bug 969351 for CVE-2016-2841",
"url": "https://bugzilla.suse.com/969351"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "low"
}
],
"title": "CVE-2016-2841"
},
{
"cve": "CVE-2016-2857",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2857"
}
],
"notes": [
{
"category": "general",
"text": "The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service (out-of-bounds heap read and crash) via the payload length in a crafted packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2857",
"url": "https://www.suse.com/security/cve/CVE-2016-2857"
},
{
"category": "external",
"summary": "SUSE Bug 970037 for CVE-2016-2857",
"url": "https://bugzilla.suse.com/970037"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "low"
}
],
"title": "CVE-2016-2857"
},
{
"cve": "CVE-2016-2858",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2858"
}
],
"notes": [
{
"category": "general",
"text": "QEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local guest OS users to cause a denial of service (process crash) via an entropy request, which triggers arbitrary stack based allocation and memory corruption.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2858",
"url": "https://www.suse.com/security/cve/CVE-2016-2858"
},
{
"category": "external",
"summary": "SUSE Bug 970036 for CVE-2016-2858",
"url": "https://bugzilla.suse.com/970036"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "low"
}
],
"title": "CVE-2016-2858"
},
{
"cve": "CVE-2016-3710",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-3710"
}
],
"notes": [
{
"category": "general",
"text": "The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the \"Dark Portal\" issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-3710",
"url": "https://www.suse.com/security/cve/CVE-2016-3710"
},
{
"category": "external",
"summary": "SUSE Bug 978158 for CVE-2016-3710",
"url": "https://bugzilla.suse.com/978158"
},
{
"category": "external",
"summary": "SUSE Bug 978164 for CVE-2016-3710",
"url": "https://bugzilla.suse.com/978164"
},
{
"category": "external",
"summary": "SUSE Bug 978167 for CVE-2016-3710",
"url": "https://bugzilla.suse.com/978167"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "moderate"
}
],
"title": "CVE-2016-3710"
},
{
"cve": "CVE-2016-3712",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-3712"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) by editing VGA registers in VBE mode.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-3712",
"url": "https://www.suse.com/security/cve/CVE-2016-3712"
},
{
"category": "external",
"summary": "SUSE Bug 978160 for CVE-2016-3712",
"url": "https://bugzilla.suse.com/978160"
},
{
"category": "external",
"summary": "SUSE Bug 978164 for CVE-2016-3712",
"url": "https://bugzilla.suse.com/978164"
},
{
"category": "external",
"summary": "SUSE Bug 978167 for CVE-2016-3712",
"url": "https://bugzilla.suse.com/978167"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "low"
}
],
"title": "CVE-2016-3712"
},
{
"cve": "CVE-2016-4001",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4001"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet.c in QEMU, when the Stellaris ethernet controller is configured to accept large packets, allows remote attackers to cause a denial of service (QEMU crash) via a large packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4001",
"url": "https://www.suse.com/security/cve/CVE-2016-4001"
},
{
"category": "external",
"summary": "SUSE Bug 975128 for CVE-2016-4001",
"url": "https://bugzilla.suse.com/975128"
},
{
"category": "external",
"summary": "SUSE Bug 975130 for CVE-2016-4001",
"url": "https://bugzilla.suse.com/975130"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "moderate"
}
],
"title": "CVE-2016-4001"
},
{
"cve": "CVE-2016-4002",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4002"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept large packets, allows remote attackers to cause a denial of service (memory corruption and QEMU crash) or possibly execute arbitrary code via a packet larger than 1514 bytes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4002",
"url": "https://www.suse.com/security/cve/CVE-2016-4002"
},
{
"category": "external",
"summary": "SUSE Bug 975136 for CVE-2016-4002",
"url": "https://bugzilla.suse.com/975136"
},
{
"category": "external",
"summary": "SUSE Bug 975138 for CVE-2016-4002",
"url": "https://bugzilla.suse.com/975138"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "moderate"
}
],
"title": "CVE-2016-4002"
},
{
"cve": "CVE-2016-4020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4020"
}
],
"notes": [
{
"category": "general",
"text": "The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register (TPR).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4020",
"url": "https://www.suse.com/security/cve/CVE-2016-4020"
},
{
"category": "external",
"summary": "SUSE Bug 975700 for CVE-2016-4020",
"url": "https://bugzilla.suse.com/975700"
},
{
"category": "external",
"summary": "SUSE Bug 975907 for CVE-2016-4020",
"url": "https://bugzilla.suse.com/975907"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "low"
}
],
"title": "CVE-2016-4020"
},
{
"cve": "CVE-2016-4037",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4037"
}
],
"notes": [
{
"category": "general",
"text": "The ehci_advance_state function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular split isochronous transfer descriptor (siTD) list, a related issue to CVE-2015-8558.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4037",
"url": "https://www.suse.com/security/cve/CVE-2016-4037"
},
{
"category": "external",
"summary": "SUSE Bug 959005 for CVE-2016-4037",
"url": "https://bugzilla.suse.com/959005"
},
{
"category": "external",
"summary": "SUSE Bug 959006 for CVE-2016-4037",
"url": "https://bugzilla.suse.com/959006"
},
{
"category": "external",
"summary": "SUSE Bug 976109 for CVE-2016-4037",
"url": "https://bugzilla.suse.com/976109"
},
{
"category": "external",
"summary": "SUSE Bug 976111 for CVE-2016-4037",
"url": "https://bugzilla.suse.com/976111"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "low"
}
],
"title": "CVE-2016-4037"
},
{
"cve": "CVE-2016-4439",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4439"
}
],
"notes": [
{
"category": "general",
"text": "The esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check command buffer length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or potentially execute arbitrary code on the QEMU host via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4439",
"url": "https://www.suse.com/security/cve/CVE-2016-4439"
},
{
"category": "external",
"summary": "SUSE Bug 980711 for CVE-2016-4439",
"url": "https://bugzilla.suse.com/980711"
},
{
"category": "external",
"summary": "SUSE Bug 980716 for CVE-2016-4439",
"url": "https://bugzilla.suse.com/980716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "low"
}
],
"title": "CVE-2016-4439"
},
{
"cve": "CVE-2016-4441",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4441"
}
],
"notes": [
{
"category": "general",
"text": "The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via unspecified vectors, involving an SCSI command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4441",
"url": "https://www.suse.com/security/cve/CVE-2016-4441"
},
{
"category": "external",
"summary": "SUSE Bug 980723 for CVE-2016-4441",
"url": "https://bugzilla.suse.com/980723"
},
{
"category": "external",
"summary": "SUSE Bug 980724 for CVE-2016-4441",
"url": "https://bugzilla.suse.com/980724"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "low"
}
],
"title": "CVE-2016-4441"
},
{
"cve": "CVE-2016-4952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4952"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator), when built with VMWARE PVSCSI paravirtual SCSI bus emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds array access) via vectors related to the (1) PVSCSI_CMD_SETUP_RINGS or (2) PVSCSI_CMD_SETUP_MSG_RING SCSI command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4952",
"url": "https://www.suse.com/security/cve/CVE-2016-4952"
},
{
"category": "external",
"summary": "SUSE Bug 981266 for CVE-2016-4952",
"url": "https://bugzilla.suse.com/981266"
},
{
"category": "external",
"summary": "SUSE Bug 981276 for CVE-2016-4952",
"url": "https://bugzilla.suse.com/981276"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Desktop 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server 12 SP1:qemu-x86-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-curl-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-block-rbd-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-guest-agent-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ipxe-1.0.0-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-kvm-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-lang-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-ppc-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-s390-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-seabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-sgabios-8-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-tools-2.3.1-14.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-vgabios-1.8.1-14.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:qemu-x86-2.3.1-14.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-29T05:47:55Z",
"details": "low"
}
],
"title": "CVE-2016-4952"
}
]
}
suse-su-2016:0955-1
Vulnerability from csaf_suse
Published
2016-04-05 11:27
Modified
2016-04-05 11:27
Summary
Security update for xen
Notes
Title of the patch
Security update for xen
Description of the patch
xen was updated to fix 47 security issues.
These security issues were fixed:
- CVE-2013-4527: Buffer overflow in hw/timer/hpet.c might have allowed remote attackers to execute arbitrary code via vectors related to the number of timers (bnc#864673).
- CVE-2013-4529: Buffer overflow in hw/pci/pcie_aer.c allowed remote attackers to cause a denial of service and possibly execute arbitrary code via a large log_num value in a savevm image (bnc#864678).
- CVE-2013-4530: Buffer overflow in hw/ssi/pl022.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via crafted tx_fifo_head and rx_fifo_head values in a savevm image (bnc#864682).
- CVE-2013-4533: Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s->rx_level value in a savevm image (bsc#864655).
- CVE-2013-4534: Buffer overflow in hw/intc/openpic.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via vectors related to IRQDest elements (bsc#864811).
- CVE-2013-4537: The ssi_sd_transfer function in hw/sd/ssi-sd.c allowed remote attackers to execute arbitrary code via a crafted arglen value in a savevm image (bsc#864391).
- CVE-2013-4538: Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c allowed remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted (1) cmd_len, (2) row, or (3) col values; (4) row_start and row_end values; or (5) col_star and col_end values in a savevm image (bsc#864769).
- CVE-2013-4539: Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c might have allowed remote attackers to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image (bsc#864805).
- CVE-2014-0222: Integer overflow in the qcow_open function in block/qcow.c allowed remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image (bsc#877642).
- CVE-2014-3640: The sosendto function in slirp/udp.c allowed local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket (bsc#897654).
- CVE-2014-3689: The vmware-vga driver (hw/display/vmware_vga.c) allowed local guest users to write to qemu memory locations and gain privileges via unspecified parameters related to rectangle handling (bsc#901508).
- CVE-2014-7815: The set_pixel_format function in ui/vnc.c allowed remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value (bsc#902737).
- CVE-2014-9718: The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality had multiple interpretations of a function's return value, which allowed guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and system crash) via a PRDT with zero complete sectors, related to the bmdma_prepare_buf and ahci_dma_prepare_buf functions (bsc#928393).
- CVE-2015-1779: The VNC websocket frame decoder allowed remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section (bsc#924018).
- CVE-2015-5278: Infinite loop in ne2000_receive() function (bsc#945989).
- CVE-2015-6855: hw/ide/core.c did not properly restrict the commands accepted by an ATAPI device, which allowed guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash (bsc#945404).
- CVE-2015-7512: Buffer overflow in the pcnet_receive function in hw/net/pcnet.c, when a guest NIC has a larger MTU, allowed remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet (bsc#957162).
- CVE-2015-7549: pci: NULL pointer dereference issue (bsc#958917).
- CVE-2015-8345: eepro100: infinite loop in processing command block list (bsc#956829).
- CVE-2015-8504: VNC: floating point exception (bsc#958491).
- CVE-2015-8550: Paravirtualized drivers were incautious about shared memory contents (XSA-155) (bsc#957988).
- CVE-2015-8554: qemu-dm buffer overrun in MSI-X handling (XSA-164) (bsc#958007).
- CVE-2015-8555: Information leak in legacy x86 FPU/XMM initialization (XSA-165) (bsc#958009).
- CVE-2015-8558: Infinite loop in ehci_advance_state resulted in DoS (bsc#959005).
- CVE-2015-8567: vmxnet3: host memory leakage (bsc#959387).
- CVE-2015-8568: vmxnet3: host memory leakage (bsc#959387).
- CVE-2015-8613: SCSI: stack based buffer overflow in megasas_ctrl_get_info (bsc#961358).
- CVE-2015-8619: Stack based OOB write in hmp_sendkey routine (bsc#960334).
- CVE-2015-8743: ne2000: OOB memory access in ioport r/w functions (bsc#960725).
- CVE-2015-8744: vmxnet3: Incorrect l2 header validation lead to a crash via assert(2) call (bsc#960835).
- CVE-2015-8745: Reading IMR registers lead to a crash via assert(2) call (bsc#960707).
- CVE-2015-8817: OOB access in address_space_rw lead to segmentation fault (I) (bsc#969121).
- CVE-2015-8818: OOB access in address_space_rw lead to segmentation fault (II) (bsc#969122).
- CVE-2016-1568: AHCI use-after-free vulnerability in aio port commands (bsc#961332).
- CVE-2016-1570: The PV superpage functionality in arch/x86/mm.c allowed local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page identifier (MFN) to the (1) MMUEXT_MARK_SUPER or (2) MMUEXT_UNMARK_SUPER sub-op in the HYPERVISOR_mmuext_op hypercall or (3) unknown vectors related to page table updates (bsc#960861).
- CVE-2016-1571: VMX: intercept issue with INVLPG on non-canonical address (XSA-168) (bsc#960862).
- CVE-2016-1714: nvram: OOB r/w access in processing firmware configurations (bsc#961691).
- CVE-2016-1922: NULL pointer dereference in vapic_write() (bsc#962320).
- CVE-2016-1981: e1000 infinite loop in start_xmit and e1000_receive_iov routines (bsc#963782).
- CVE-2016-2198: EHCI NULL pointer dereference in ehci_caps_write (bsc#964413).
- CVE-2016-2270: Xen allowed local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings (bsc#965315).
- CVE-2016-2271: VMX when using an Intel or Cyrix CPU, allowed local HVM guest users to cause a denial of service (guest crash) via vectors related to a non-canonical RIP (bsc#965317).
- CVE-2016-2391: usb: multiple eof_timers in ohci module lead to NULL pointer dereference (bsc#967013).
- CVE-2016-2392: NULL pointer dereference in remote NDIS control message handling (bsc#967012).
- CVE-2016-2538: Integer overflow in remote NDIS control message handling (bsc#967969).
- CVE-2016-2841: ne2000: Infinite loop in ne2000_receive (bsc#969350).
- XSA-166: ioreq handling possibly susceptible to multiple read issue (bsc#958523).
These non-security issues were fixed:
- bsc#954872: script block-dmmd not working as expected
- bsc#963923: domain weights not honored when sched-credit tslice is reduced
- bsc#959695: Missing docs for xen
- bsc#967630: Discrepancy in reported memory size with correction XSA-153 for xend
- bsc#959928: When DomU is in state running xm domstate returned nothing
Patchnames
sdksp4-xen-12492,sledsp4-xen-12492,slessp4-xen-12492
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for xen",
"title": "Title of the patch"
},
{
"category": "description",
"text": "xen was updated to fix 47 security issues.\n\nThese security issues were fixed:\n- CVE-2013-4527: Buffer overflow in hw/timer/hpet.c might have allowed remote attackers to execute arbitrary code via vectors related to the number of timers (bnc#864673).\n- CVE-2013-4529: Buffer overflow in hw/pci/pcie_aer.c allowed remote attackers to cause a denial of service and possibly execute arbitrary code via a large log_num value in a savevm image (bnc#864678).\n- CVE-2013-4530: Buffer overflow in hw/ssi/pl022.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via crafted tx_fifo_head and rx_fifo_head values in a savevm image (bnc#864682).\n- CVE-2013-4533: Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s-\u003erx_level value in a savevm image (bsc#864655).\n- CVE-2013-4534: Buffer overflow in hw/intc/openpic.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via vectors related to IRQDest elements (bsc#864811).\n- CVE-2013-4537: The ssi_sd_transfer function in hw/sd/ssi-sd.c allowed remote attackers to execute arbitrary code via a crafted arglen value in a savevm image (bsc#864391).\n- CVE-2013-4538: Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c allowed remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted (1) cmd_len, (2) row, or (3) col values; (4) row_start and row_end values; or (5) col_star and col_end values in a savevm image (bsc#864769).\n- CVE-2013-4539: Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c might have allowed remote attackers to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image (bsc#864805).\n- CVE-2014-0222: Integer overflow in the qcow_open function in block/qcow.c allowed remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image (bsc#877642).\n- CVE-2014-3640: The sosendto function in slirp/udp.c allowed local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket (bsc#897654).\n- CVE-2014-3689: The vmware-vga driver (hw/display/vmware_vga.c) allowed local guest users to write to qemu memory locations and gain privileges via unspecified parameters related to rectangle handling (bsc#901508).\n- CVE-2014-7815: The set_pixel_format function in ui/vnc.c allowed remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value (bsc#902737).\n- CVE-2014-9718: The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality had multiple interpretations of a function\u0027s return value, which allowed guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and system crash) via a PRDT with zero complete sectors, related to the bmdma_prepare_buf and ahci_dma_prepare_buf functions (bsc#928393).\n- CVE-2015-1779: The VNC websocket frame decoder allowed remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section (bsc#924018).\n- CVE-2015-5278: Infinite loop in ne2000_receive() function (bsc#945989).\n- CVE-2015-6855: hw/ide/core.c did not properly restrict the commands accepted by an ATAPI device, which allowed guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash (bsc#945404).\n- CVE-2015-7512: Buffer overflow in the pcnet_receive function in hw/net/pcnet.c, when a guest NIC has a larger MTU, allowed remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet (bsc#957162).\n- CVE-2015-7549: pci: NULL pointer dereference issue (bsc#958917).\n- CVE-2015-8345: eepro100: infinite loop in processing command block list (bsc#956829).\n- CVE-2015-8504: VNC: floating point exception (bsc#958491).\n- CVE-2015-8550: Paravirtualized drivers were incautious about shared memory contents (XSA-155) (bsc#957988).\n- CVE-2015-8554: qemu-dm buffer overrun in MSI-X handling (XSA-164) (bsc#958007).\n- CVE-2015-8555: Information leak in legacy x86 FPU/XMM initialization (XSA-165) (bsc#958009).\n- CVE-2015-8558: Infinite loop in ehci_advance_state resulted in DoS (bsc#959005).\n- CVE-2015-8567: vmxnet3: host memory leakage (bsc#959387).\n- CVE-2015-8568: vmxnet3: host memory leakage (bsc#959387).\n- CVE-2015-8613: SCSI: stack based buffer overflow in megasas_ctrl_get_info (bsc#961358).\n- CVE-2015-8619: Stack based OOB write in hmp_sendkey routine (bsc#960334).\n- CVE-2015-8743: ne2000: OOB memory access in ioport r/w functions (bsc#960725).\n- CVE-2015-8744: vmxnet3: Incorrect l2 header validation lead to a crash via assert(2) call (bsc#960835).\n- CVE-2015-8745: Reading IMR registers lead to a crash via assert(2) call (bsc#960707).\n- CVE-2015-8817: OOB access in address_space_rw lead to segmentation fault (I) (bsc#969121).\n- CVE-2015-8818: OOB access in address_space_rw lead to segmentation fault (II) (bsc#969122).\n- CVE-2016-1568: AHCI use-after-free vulnerability in aio port commands (bsc#961332).\n- CVE-2016-1570: The PV superpage functionality in arch/x86/mm.c allowed local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page identifier (MFN) to the (1) MMUEXT_MARK_SUPER or (2) MMUEXT_UNMARK_SUPER sub-op in the HYPERVISOR_mmuext_op hypercall or (3) unknown vectors related to page table updates (bsc#960861).\n- CVE-2016-1571: VMX: intercept issue with INVLPG on non-canonical address (XSA-168) (bsc#960862).\n- CVE-2016-1714: nvram: OOB r/w access in processing firmware configurations (bsc#961691).\n- CVE-2016-1922: NULL pointer dereference in vapic_write() (bsc#962320).\n- CVE-2016-1981: e1000 infinite loop in start_xmit and e1000_receive_iov routines (bsc#963782).\n- CVE-2016-2198: EHCI NULL pointer dereference in ehci_caps_write (bsc#964413).\n- CVE-2016-2270: Xen allowed local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings (bsc#965315).\n- CVE-2016-2271: VMX when using an Intel or Cyrix CPU, allowed local HVM guest users to cause a denial of service (guest crash) via vectors related to a non-canonical RIP (bsc#965317).\n- CVE-2016-2391: usb: multiple eof_timers in ohci module lead to NULL pointer dereference (bsc#967013).\n- CVE-2016-2392: NULL pointer dereference in remote NDIS control message handling (bsc#967012).\n- CVE-2016-2538: Integer overflow in remote NDIS control message handling (bsc#967969).\n- CVE-2016-2841: ne2000: Infinite loop in ne2000_receive (bsc#969350).\n- XSA-166: ioreq handling possibly susceptible to multiple read issue (bsc#958523).\n\nThese non-security issues were fixed:\n- bsc#954872: script block-dmmd not working as expected \n- bsc#963923: domain weights not honored when sched-credit tslice is reduced\n- bsc#959695: Missing docs for xen\n- bsc#967630: Discrepancy in reported memory size with correction XSA-153 for xend\n- bsc#959928: When DomU is in state running xm domstate returned nothing\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "sdksp4-xen-12492,sledsp4-xen-12492,slessp4-xen-12492",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_0955-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2016:0955-1",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160955-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2016:0955-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2016-April/001983.html"
},
{
"category": "self",
"summary": "SUSE Bug 864391",
"url": "https://bugzilla.suse.com/864391"
},
{
"category": "self",
"summary": "SUSE Bug 864655",
"url": "https://bugzilla.suse.com/864655"
},
{
"category": "self",
"summary": "SUSE Bug 864673",
"url": "https://bugzilla.suse.com/864673"
},
{
"category": "self",
"summary": "SUSE Bug 864678",
"url": "https://bugzilla.suse.com/864678"
},
{
"category": "self",
"summary": "SUSE Bug 864682",
"url": "https://bugzilla.suse.com/864682"
},
{
"category": "self",
"summary": "SUSE Bug 864769",
"url": "https://bugzilla.suse.com/864769"
},
{
"category": "self",
"summary": "SUSE Bug 864805",
"url": "https://bugzilla.suse.com/864805"
},
{
"category": "self",
"summary": "SUSE Bug 864811",
"url": "https://bugzilla.suse.com/864811"
},
{
"category": "self",
"summary": "SUSE Bug 877642",
"url": "https://bugzilla.suse.com/877642"
},
{
"category": "self",
"summary": "SUSE Bug 897654",
"url": "https://bugzilla.suse.com/897654"
},
{
"category": "self",
"summary": "SUSE Bug 901508",
"url": "https://bugzilla.suse.com/901508"
},
{
"category": "self",
"summary": "SUSE Bug 902737",
"url": "https://bugzilla.suse.com/902737"
},
{
"category": "self",
"summary": "SUSE Bug 924018",
"url": "https://bugzilla.suse.com/924018"
},
{
"category": "self",
"summary": "SUSE Bug 928393",
"url": "https://bugzilla.suse.com/928393"
},
{
"category": "self",
"summary": "SUSE Bug 945404",
"url": "https://bugzilla.suse.com/945404"
},
{
"category": "self",
"summary": "SUSE Bug 945989",
"url": "https://bugzilla.suse.com/945989"
},
{
"category": "self",
"summary": "SUSE Bug 954872",
"url": "https://bugzilla.suse.com/954872"
},
{
"category": "self",
"summary": "SUSE Bug 956829",
"url": "https://bugzilla.suse.com/956829"
},
{
"category": "self",
"summary": "SUSE Bug 957162",
"url": "https://bugzilla.suse.com/957162"
},
{
"category": "self",
"summary": "SUSE Bug 957988",
"url": "https://bugzilla.suse.com/957988"
},
{
"category": "self",
"summary": "SUSE Bug 958007",
"url": "https://bugzilla.suse.com/958007"
},
{
"category": "self",
"summary": "SUSE Bug 958009",
"url": "https://bugzilla.suse.com/958009"
},
{
"category": "self",
"summary": "SUSE Bug 958491",
"url": "https://bugzilla.suse.com/958491"
},
{
"category": "self",
"summary": "SUSE Bug 958523",
"url": "https://bugzilla.suse.com/958523"
},
{
"category": "self",
"summary": "SUSE Bug 958917",
"url": "https://bugzilla.suse.com/958917"
},
{
"category": "self",
"summary": "SUSE Bug 959005",
"url": "https://bugzilla.suse.com/959005"
},
{
"category": "self",
"summary": "SUSE Bug 959387",
"url": "https://bugzilla.suse.com/959387"
},
{
"category": "self",
"summary": "SUSE Bug 959695",
"url": "https://bugzilla.suse.com/959695"
},
{
"category": "self",
"summary": "SUSE Bug 959928",
"url": "https://bugzilla.suse.com/959928"
},
{
"category": "self",
"summary": "SUSE Bug 960334",
"url": "https://bugzilla.suse.com/960334"
},
{
"category": "self",
"summary": "SUSE Bug 960707",
"url": "https://bugzilla.suse.com/960707"
},
{
"category": "self",
"summary": "SUSE Bug 960725",
"url": "https://bugzilla.suse.com/960725"
},
{
"category": "self",
"summary": "SUSE Bug 960835",
"url": "https://bugzilla.suse.com/960835"
},
{
"category": "self",
"summary": "SUSE Bug 960861",
"url": "https://bugzilla.suse.com/960861"
},
{
"category": "self",
"summary": "SUSE Bug 960862",
"url": "https://bugzilla.suse.com/960862"
},
{
"category": "self",
"summary": "SUSE Bug 961332",
"url": "https://bugzilla.suse.com/961332"
},
{
"category": "self",
"summary": "SUSE Bug 961358",
"url": "https://bugzilla.suse.com/961358"
},
{
"category": "self",
"summary": "SUSE Bug 961691",
"url": "https://bugzilla.suse.com/961691"
},
{
"category": "self",
"summary": "SUSE Bug 962320",
"url": "https://bugzilla.suse.com/962320"
},
{
"category": "self",
"summary": "SUSE Bug 963782",
"url": "https://bugzilla.suse.com/963782"
},
{
"category": "self",
"summary": "SUSE Bug 963923",
"url": "https://bugzilla.suse.com/963923"
},
{
"category": "self",
"summary": "SUSE Bug 964413",
"url": "https://bugzilla.suse.com/964413"
},
{
"category": "self",
"summary": "SUSE Bug 965315",
"url": "https://bugzilla.suse.com/965315"
},
{
"category": "self",
"summary": "SUSE Bug 965317",
"url": "https://bugzilla.suse.com/965317"
},
{
"category": "self",
"summary": "SUSE Bug 967012",
"url": "https://bugzilla.suse.com/967012"
},
{
"category": "self",
"summary": "SUSE Bug 967013",
"url": "https://bugzilla.suse.com/967013"
},
{
"category": "self",
"summary": "SUSE Bug 967630",
"url": "https://bugzilla.suse.com/967630"
},
{
"category": "self",
"summary": "SUSE Bug 967969",
"url": "https://bugzilla.suse.com/967969"
},
{
"category": "self",
"summary": "SUSE Bug 969121",
"url": "https://bugzilla.suse.com/969121"
},
{
"category": "self",
"summary": "SUSE Bug 969122",
"url": "https://bugzilla.suse.com/969122"
},
{
"category": "self",
"summary": "SUSE Bug 969350",
"url": "https://bugzilla.suse.com/969350"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4527 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4527/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4529 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4529/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4530 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4530/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4533 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4534 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4534/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4537 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4537/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4538 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4538/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4539 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0222 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0222/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3640 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3640/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3689 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3689/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7815 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-9718 page",
"url": "https://www.suse.com/security/cve/CVE-2014-9718/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1779 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1779/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5278 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5278/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6855 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6855/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7512 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7512/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7549 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7549/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8345 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8345/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8504 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8504/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8550 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8550/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8554 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8554/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8555 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8555/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8558 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8558/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8567 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8567/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8568 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8568/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8613 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8613/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8619 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8619/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8743 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8743/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8744 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8744/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8745 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8817 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8818 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1568 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1568/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1570 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1570/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1571 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1571/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1714 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1714/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1922 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1922/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1981 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1981/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2198 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2198/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2270 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2270/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2271 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2271/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2391 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2391/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2392 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2392/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2538 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2538/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2841 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2841/"
}
],
"title": "Security update for xen",
"tracking": {
"current_release_date": "2016-04-05T11:27:02Z",
"generator": {
"date": "2016-04-05T11:27:02Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2016:0955-1",
"initial_release_date": "2016-04-05T11:27:02Z",
"revision_history": [
{
"date": "2016-04-05T11:27:02Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "xen-devel-4.4.4_02-32.1.i586",
"product": {
"name": "xen-devel-4.4.4_02-32.1.i586",
"product_id": "xen-devel-4.4.4_02-32.1.i586"
}
},
{
"category": "product_version",
"name": "xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"product": {
"name": "xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"product_id": "xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586"
}
},
{
"category": "product_version",
"name": "xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"product": {
"name": "xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"product_id": "xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586"
}
},
{
"category": "product_version",
"name": "xen-libs-4.4.4_02-32.1.i586",
"product": {
"name": "xen-libs-4.4.4_02-32.1.i586",
"product_id": "xen-libs-4.4.4_02-32.1.i586"
}
},
{
"category": "product_version",
"name": "xen-tools-domU-4.4.4_02-32.1.i586",
"product": {
"name": "xen-tools-domU-4.4.4_02-32.1.i586",
"product_id": "xen-tools-domU-4.4.4_02-32.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "xen-devel-4.4.4_02-32.1.x86_64",
"product": {
"name": "xen-devel-4.4.4_02-32.1.x86_64",
"product_id": "xen-devel-4.4.4_02-32.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-4.4.4_02-32.1.x86_64",
"product": {
"name": "xen-4.4.4_02-32.1.x86_64",
"product_id": "xen-4.4.4_02-32.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-doc-html-4.4.4_02-32.1.x86_64",
"product": {
"name": "xen-doc-html-4.4.4_02-32.1.x86_64",
"product_id": "xen-doc-html-4.4.4_02-32.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"product": {
"name": "xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"product_id": "xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-libs-4.4.4_02-32.1.x86_64",
"product": {
"name": "xen-libs-4.4.4_02-32.1.x86_64",
"product_id": "xen-libs-4.4.4_02-32.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-libs-32bit-4.4.4_02-32.1.x86_64",
"product": {
"name": "xen-libs-32bit-4.4.4_02-32.1.x86_64",
"product_id": "xen-libs-32bit-4.4.4_02-32.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-tools-4.4.4_02-32.1.x86_64",
"product": {
"name": "xen-tools-4.4.4_02-32.1.x86_64",
"product_id": "xen-tools-4.4.4_02-32.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-tools-domU-4.4.4_02-32.1.x86_64",
"product": {
"name": "xen-tools-domU-4.4.4_02-32.1.x86_64",
"product_id": "xen-tools-domU-4.4.4_02-32.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/a:suse:sle-sdk:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Desktop 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sled:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_sles:11:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:11:sp4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-4.4.4_02-32.1.i586 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586"
},
"product_reference": "xen-devel-4.4.4_02-32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-4.4.4_02-32.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 11 SP4",
"product_id": "SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
},
"product_reference": "xen-devel-4.4.4_02-32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-4.4.4_02-32.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64"
},
"product_reference": "xen-4.4.4_02-32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-doc-html-4.4.4_02-32.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64"
},
"product_reference": "xen-doc-html-4.4.4_02-32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586"
},
"product_reference": "xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64"
},
"product_reference": "xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586"
},
"product_reference": "xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-4.4.4_02-32.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586"
},
"product_reference": "xen-libs-4.4.4_02-32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-4.4.4_02-32.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64"
},
"product_reference": "xen-libs-4.4.4_02-32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-32bit-4.4.4_02-32.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64"
},
"product_reference": "xen-libs-32bit-4.4.4_02-32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-4.4.4_02-32.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64"
},
"product_reference": "xen-tools-4.4.4_02-32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-domU-4.4.4_02-32.1.i586 as component of SUSE Linux Enterprise Desktop 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586"
},
"product_reference": "xen-tools-domU-4.4.4_02-32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-domU-4.4.4_02-32.1.x86_64 as component of SUSE Linux Enterprise Desktop 11 SP4",
"product_id": "SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64"
},
"product_reference": "xen-tools-domU-4.4.4_02-32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-4.4.4_02-32.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64"
},
"product_reference": "xen-4.4.4_02-32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-doc-html-4.4.4_02-32.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64"
},
"product_reference": "xen-doc-html-4.4.4_02-32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586"
},
"product_reference": "xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64"
},
"product_reference": "xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586"
},
"product_reference": "xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-4.4.4_02-32.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586"
},
"product_reference": "xen-libs-4.4.4_02-32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-4.4.4_02-32.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64"
},
"product_reference": "xen-libs-4.4.4_02-32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-32bit-4.4.4_02-32.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64"
},
"product_reference": "xen-libs-32bit-4.4.4_02-32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-4.4.4_02-32.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64"
},
"product_reference": "xen-tools-4.4.4_02-32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-domU-4.4.4_02-32.1.i586 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586"
},
"product_reference": "xen-tools-domU-4.4.4_02-32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-domU-4.4.4_02-32.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP4",
"product_id": "SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64"
},
"product_reference": "xen-tools-domU-4.4.4_02-32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-4.4.4_02-32.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64"
},
"product_reference": "xen-4.4.4_02-32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-doc-html-4.4.4_02-32.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64"
},
"product_reference": "xen-doc-html-4.4.4_02-32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586"
},
"product_reference": "xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64"
},
"product_reference": "xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586"
},
"product_reference": "xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-4.4.4_02-32.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586"
},
"product_reference": "xen-libs-4.4.4_02-32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-4.4.4_02-32.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64"
},
"product_reference": "xen-libs-4.4.4_02-32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-32bit-4.4.4_02-32.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64"
},
"product_reference": "xen-libs-32bit-4.4.4_02-32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-4.4.4_02-32.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64"
},
"product_reference": "xen-tools-4.4.4_02-32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-domU-4.4.4_02-32.1.i586 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586"
},
"product_reference": "xen-tools-domU-4.4.4_02-32.1.i586",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-domU-4.4.4_02-32.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 11 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64"
},
"product_reference": "xen-tools-domU-4.4.4_02-32.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 11 SP4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2013-4527",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4527"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in hw/timer/hpet.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via vectors related to the number of timers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4527",
"url": "https://www.suse.com/security/cve/CVE-2013-4527"
},
{
"category": "external",
"summary": "SUSE Bug 864673 for CVE-2013-4527",
"url": "https://bugzilla.suse.com/864673"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4527",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 964746 for CVE-2013-4527",
"url": "https://bugzilla.suse.com/964746"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "moderate"
}
],
"title": "CVE-2013-4527"
},
{
"cve": "CVE-2013-4529",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4529"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in hw/pci/pcie_aer.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large log_num value in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4529",
"url": "https://www.suse.com/security/cve/CVE-2013-4529"
},
{
"category": "external",
"summary": "SUSE Bug 864678 for CVE-2013-4529",
"url": "https://bugzilla.suse.com/864678"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4529",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 964929 for CVE-2013-4529",
"url": "https://bugzilla.suse.com/964929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "moderate"
}
],
"title": "CVE-2013-4529"
},
{
"cve": "CVE-2013-4530",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4530"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in hw/ssi/pl022.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted tx_fifo_head and rx_fifo_head values in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4530",
"url": "https://www.suse.com/security/cve/CVE-2013-4530"
},
{
"category": "external",
"summary": "SUSE Bug 1072198 for CVE-2013-4530",
"url": "https://bugzilla.suse.com/1072198"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2013-4530",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 1072228 for CVE-2013-4530",
"url": "https://bugzilla.suse.com/1072228"
},
{
"category": "external",
"summary": "SUSE Bug 864682 for CVE-2013-4530",
"url": "https://bugzilla.suse.com/864682"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4530",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 964950 for CVE-2013-4530",
"url": "https://bugzilla.suse.com/964950"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "important"
}
],
"title": "CVE-2013-4530"
},
{
"cve": "CVE-2013-4533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4533"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s-\u003erx_level value in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4533",
"url": "https://www.suse.com/security/cve/CVE-2013-4533"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2013-4533",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 864655 for CVE-2013-4533",
"url": "https://bugzilla.suse.com/864655"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4533",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 964644 for CVE-2013-4533",
"url": "https://bugzilla.suse.com/964644"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "important"
}
],
"title": "CVE-2013-4533"
},
{
"cve": "CVE-2013-4534",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4534"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in hw/intc/openpic.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via vectors related to IRQDest elements.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4534",
"url": "https://www.suse.com/security/cve/CVE-2013-4534"
},
{
"category": "external",
"summary": "SUSE Bug 864811 for CVE-2013-4534",
"url": "https://bugzilla.suse.com/864811"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4534",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 964452 for CVE-2013-4534",
"url": "https://bugzilla.suse.com/964452"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "important"
}
],
"title": "CVE-2013-4534"
},
{
"cve": "CVE-2013-4537",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4537"
}
],
"notes": [
{
"category": "general",
"text": "The ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted arglen value in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4537",
"url": "https://www.suse.com/security/cve/CVE-2013-4537"
},
{
"category": "external",
"summary": "SUSE Bug 864391 for CVE-2013-4537",
"url": "https://bugzilla.suse.com/864391"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4537",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 962642 for CVE-2013-4537",
"url": "https://bugzilla.suse.com/962642"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "important"
}
],
"title": "CVE-2013-4537"
},
{
"cve": "CVE-2013-4538",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4538"
}
],
"notes": [
{
"category": "general",
"text": "Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c in QEMU before 1.7.2 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted (1) cmd_len, (2) row, or (3) col values; (4) row_start and row_end values; or (5) col_star and col_end values in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4538",
"url": "https://www.suse.com/security/cve/CVE-2013-4538"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2013-4538",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 864769 for CVE-2013-4538",
"url": "https://bugzilla.suse.com/864769"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4538",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 962335 for CVE-2013-4538",
"url": "https://bugzilla.suse.com/962335"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "important"
}
],
"title": "CVE-2013-4538"
},
{
"cve": "CVE-2013-4539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4539"
}
],
"notes": [
{
"category": "general",
"text": "Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4539",
"url": "https://www.suse.com/security/cve/CVE-2013-4539"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2013-4539",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 864805 for CVE-2013-4539",
"url": "https://bugzilla.suse.com/864805"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4539",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 962758 for CVE-2013-4539",
"url": "https://bugzilla.suse.com/962758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "important"
}
],
"title": "CVE-2013-4539"
},
{
"cve": "CVE-2014-0222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0222"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0222",
"url": "https://www.suse.com/security/cve/CVE-2014-0222"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2014-0222",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 877642 for CVE-2014-0222",
"url": "https://bugzilla.suse.com/877642"
},
{
"category": "external",
"summary": "SUSE Bug 950367 for CVE-2014-0222",
"url": "https://bugzilla.suse.com/950367"
},
{
"category": "external",
"summary": "SUSE Bug 964925 for CVE-2014-0222",
"url": "https://bugzilla.suse.com/964925"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "moderate"
}
],
"title": "CVE-2014-0222"
},
{
"cve": "CVE-2014-3640",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3640"
}
],
"notes": [
{
"category": "general",
"text": "The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3640",
"url": "https://www.suse.com/security/cve/CVE-2014-3640"
},
{
"category": "external",
"summary": "SUSE Bug 897654 for CVE-2014-3640",
"url": "https://bugzilla.suse.com/897654"
},
{
"category": "external",
"summary": "SUSE Bug 965112 for CVE-2014-3640",
"url": "https://bugzilla.suse.com/965112"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "important"
}
],
"title": "CVE-2014-3640"
},
{
"cve": "CVE-2014-3689",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3689"
}
],
"notes": [
{
"category": "general",
"text": "The vmware-vga driver (hw/display/vmware_vga.c) in QEMU allows local guest users to write to qemu memory locations and gain privileges via unspecified parameters related to rectangle handling.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3689",
"url": "https://www.suse.com/security/cve/CVE-2014-3689"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2014-3689",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 1189862 for CVE-2014-3689",
"url": "https://bugzilla.suse.com/1189862"
},
{
"category": "external",
"summary": "SUSE Bug 901508 for CVE-2014-3689",
"url": "https://bugzilla.suse.com/901508"
},
{
"category": "external",
"summary": "SUSE Bug 962611 for CVE-2014-3689",
"url": "https://bugzilla.suse.com/962611"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "important"
}
],
"title": "CVE-2014-3689"
},
{
"cve": "CVE-2014-7815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7815"
}
],
"notes": [
{
"category": "general",
"text": "The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7815",
"url": "https://www.suse.com/security/cve/CVE-2014-7815"
},
{
"category": "external",
"summary": "SUSE Bug 902737 for CVE-2014-7815",
"url": "https://bugzilla.suse.com/902737"
},
{
"category": "external",
"summary": "SUSE Bug 962627 for CVE-2014-7815",
"url": "https://bugzilla.suse.com/962627"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "moderate"
}
],
"title": "CVE-2014-7815"
},
{
"cve": "CVE-2014-9718",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-9718"
}
],
"notes": [
{
"category": "general",
"text": "The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality in QEMU 1.0 through 2.1.3 have multiple interpretations of a function\u0027s return value, which allows guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and system crash) via a PRDT with zero complete sectors, related to the bmdma_prepare_buf and ahci_dma_prepare_buf functions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-9718",
"url": "https://www.suse.com/security/cve/CVE-2014-9718"
},
{
"category": "external",
"summary": "SUSE Bug 928393 for CVE-2014-9718",
"url": "https://bugzilla.suse.com/928393"
},
{
"category": "external",
"summary": "SUSE Bug 964431 for CVE-2014-9718",
"url": "https://bugzilla.suse.com/964431"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "moderate"
}
],
"title": "CVE-2014-9718"
},
{
"cve": "CVE-2015-1779",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1779"
}
],
"notes": [
{
"category": "general",
"text": "The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1779",
"url": "https://www.suse.com/security/cve/CVE-2015-1779"
},
{
"category": "external",
"summary": "SUSE Bug 924018 for CVE-2015-1779",
"url": "https://bugzilla.suse.com/924018"
},
{
"category": "external",
"summary": "SUSE Bug 962632 for CVE-2015-1779",
"url": "https://bugzilla.suse.com/962632"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "moderate"
}
],
"title": "CVE-2015-1779"
},
{
"cve": "CVE-2015-5278",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5278"
}
],
"notes": [
{
"category": "general",
"text": "The ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service (infinite loop and instance crash) or possibly execute arbitrary code via vectors related to receiving packets.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5278",
"url": "https://www.suse.com/security/cve/CVE-2015-5278"
},
{
"category": "external",
"summary": "SUSE Bug 945989 for CVE-2015-5278",
"url": "https://bugzilla.suse.com/945989"
},
{
"category": "external",
"summary": "SUSE Bug 964947 for CVE-2015-5278",
"url": "https://bugzilla.suse.com/964947"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "moderate"
}
],
"title": "CVE-2015-5278"
},
{
"cve": "CVE-2015-6855",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6855"
}
],
"notes": [
{
"category": "general",
"text": "hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6855",
"url": "https://www.suse.com/security/cve/CVE-2015-6855"
},
{
"category": "external",
"summary": "SUSE Bug 945404 for CVE-2015-6855",
"url": "https://bugzilla.suse.com/945404"
},
{
"category": "external",
"summary": "SUSE Bug 965156 for CVE-2015-6855",
"url": "https://bugzilla.suse.com/965156"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "important"
}
],
"title": "CVE-2015-6855"
},
{
"cve": "CVE-2015-7512",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7512"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7512",
"url": "https://www.suse.com/security/cve/CVE-2015-7512"
},
{
"category": "external",
"summary": "SUSE Bug 957162 for CVE-2015-7512",
"url": "https://bugzilla.suse.com/957162"
},
{
"category": "external",
"summary": "SUSE Bug 962360 for CVE-2015-7512",
"url": "https://bugzilla.suse.com/962360"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "important"
}
],
"title": "CVE-2015-7512"
},
{
"cve": "CVE-2015-7549",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7549"
}
],
"notes": [
{
"category": "general",
"text": "The MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by leveraging failure to define the .write method.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7549",
"url": "https://www.suse.com/security/cve/CVE-2015-7549"
},
{
"category": "external",
"summary": "SUSE Bug 958917 for CVE-2015-7549",
"url": "https://bugzilla.suse.com/958917"
},
{
"category": "external",
"summary": "SUSE Bug 958918 for CVE-2015-7549",
"url": "https://bugzilla.suse.com/958918"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "low"
}
],
"title": "CVE-2015-7549"
},
{
"cve": "CVE-2015-8345",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8345"
}
],
"notes": [
{
"category": "general",
"text": "The eepro100 emulator in QEMU qemu-kvm blank allows local guest users to cause a denial of service (application crash and infinite loop) via vectors involving the command block list.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8345",
"url": "https://www.suse.com/security/cve/CVE-2015-8345"
},
{
"category": "external",
"summary": "SUSE Bug 956829 for CVE-2015-8345",
"url": "https://bugzilla.suse.com/956829"
},
{
"category": "external",
"summary": "SUSE Bug 956832 for CVE-2015-8345",
"url": "https://bugzilla.suse.com/956832"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "moderate"
}
],
"title": "CVE-2015-8345"
},
{
"cve": "CVE-2015-8504",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8504"
}
],
"notes": [
{
"category": "general",
"text": "Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service (arithmetic exception and application crash) via crafted SetPixelFormat messages from a client.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8504",
"url": "https://www.suse.com/security/cve/CVE-2015-8504"
},
{
"category": "external",
"summary": "SUSE Bug 958491 for CVE-2015-8504",
"url": "https://bugzilla.suse.com/958491"
},
{
"category": "external",
"summary": "SUSE Bug 958493 for CVE-2015-8504",
"url": "https://bugzilla.suse.com/958493"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "moderate"
}
],
"title": "CVE-2015-8504"
},
{
"cve": "CVE-2015-8550",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8550"
}
],
"notes": [
{
"category": "general",
"text": "Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8550",
"url": "https://www.suse.com/security/cve/CVE-2015-8550"
},
{
"category": "external",
"summary": "SUSE Bug 1020452 for CVE-2015-8550",
"url": "https://bugzilla.suse.com/1020452"
},
{
"category": "external",
"summary": "SUSE Bug 1052256 for CVE-2015-8550",
"url": "https://bugzilla.suse.com/1052256"
},
{
"category": "external",
"summary": "SUSE Bug 957988 for CVE-2015-8550",
"url": "https://bugzilla.suse.com/957988"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "important"
}
],
"title": "CVE-2015-8550"
},
{
"cve": "CVE-2015-8554",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8554"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional (aka qemu-dm) device model, allows local x86 HVM guest administrators to gain privileges by leveraging a system with access to a passed-through MSI-X capable physical PCI device and MSI-X table entries, related to a \"write path.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8554",
"url": "https://www.suse.com/security/cve/CVE-2015-8554"
},
{
"category": "external",
"summary": "SUSE Bug 958007 for CVE-2015-8554",
"url": "https://bugzilla.suse.com/958007"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "important"
}
],
"title": "CVE-2015-8554"
},
{
"cve": "CVE-2015-8555",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8555"
}
],
"notes": [
{
"category": "general",
"text": "Xen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize x86 FPU stack and XMM registers when XSAVE/XRSTOR are not used to manage guest extended register state, which allows local guest domains to obtain sensitive information from other domains via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8555",
"url": "https://www.suse.com/security/cve/CVE-2015-8555"
},
{
"category": "external",
"summary": "SUSE Bug 958009 for CVE-2015-8555",
"url": "https://bugzilla.suse.com/958009"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "important"
}
],
"title": "CVE-2015-8555"
},
{
"cve": "CVE-2015-8558",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8558"
}
],
"notes": [
{
"category": "general",
"text": "The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular isochronous transfer descriptor (iTD) list.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8558",
"url": "https://www.suse.com/security/cve/CVE-2015-8558"
},
{
"category": "external",
"summary": "SUSE Bug 959005 for CVE-2015-8558",
"url": "https://bugzilla.suse.com/959005"
},
{
"category": "external",
"summary": "SUSE Bug 959006 for CVE-2015-8558",
"url": "https://bugzilla.suse.com/959006"
},
{
"category": "external",
"summary": "SUSE Bug 976109 for CVE-2015-8558",
"url": "https://bugzilla.suse.com/976109"
},
{
"category": "external",
"summary": "SUSE Bug 976111 for CVE-2015-8558",
"url": "https://bugzilla.suse.com/976111"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "moderate"
}
],
"title": "CVE-2015-8558"
},
{
"cve": "CVE-2015-8567",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8567"
}
],
"notes": [
{
"category": "general",
"text": "Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8567",
"url": "https://www.suse.com/security/cve/CVE-2015-8567"
},
{
"category": "external",
"summary": "SUSE Bug 959386 for CVE-2015-8567",
"url": "https://bugzilla.suse.com/959386"
},
{
"category": "external",
"summary": "SUSE Bug 959387 for CVE-2015-8567",
"url": "https://bugzilla.suse.com/959387"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "low"
}
],
"title": "CVE-2015-8567"
},
{
"cve": "CVE-2015-8568",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8568"
}
],
"notes": [
{
"category": "general",
"text": "Memory leak in QEMU, when built with a VMWARE VMXNET3 paravirtual NIC emulator support, allows local guest users to cause a denial of service (host memory consumption) by trying to activate the vmxnet3 device repeatedly.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8568",
"url": "https://www.suse.com/security/cve/CVE-2015-8568"
},
{
"category": "external",
"summary": "SUSE Bug 959386 for CVE-2015-8568",
"url": "https://bugzilla.suse.com/959386"
},
{
"category": "external",
"summary": "SUSE Bug 959387 for CVE-2015-8568",
"url": "https://bugzilla.suse.com/959387"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "low"
}
],
"title": "CVE-2015-8568"
},
{
"cve": "CVE-2015-8613",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8613"
}
],
"notes": [
{
"category": "general",
"text": "Stack-based buffer overflow in the megasas_ctrl_get_info function in QEMU, when built with SCSI MegaRAID SAS HBA emulation support, allows local guest users to cause a denial of service (QEMU instance crash) via a crafted SCSI controller CTRL_GET_INFO command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8613",
"url": "https://www.suse.com/security/cve/CVE-2015-8613"
},
{
"category": "external",
"summary": "SUSE Bug 961358 for CVE-2015-8613",
"url": "https://bugzilla.suse.com/961358"
},
{
"category": "external",
"summary": "SUSE Bug 961556 for CVE-2015-8613",
"url": "https://bugzilla.suse.com/961556"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "moderate"
}
],
"title": "CVE-2015-8613"
},
{
"cve": "CVE-2015-8619",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8619"
}
],
"notes": [
{
"category": "general",
"text": "The Human Monitor Interface support in QEMU allows remote attackers to cause a denial of service (out-of-bounds write and application crash).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8619",
"url": "https://www.suse.com/security/cve/CVE-2015-8619"
},
{
"category": "external",
"summary": "SUSE Bug 960334 for CVE-2015-8619",
"url": "https://bugzilla.suse.com/960334"
},
{
"category": "external",
"summary": "SUSE Bug 965269 for CVE-2015-8619",
"url": "https://bugzilla.suse.com/965269"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "important"
}
],
"title": "CVE-2015-8619"
},
{
"cve": "CVE-2015-8743",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8743"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing \u0027ioport\u0027 r/w operations. A privileged (CAP_SYS_RAWIO) user/process could use this flaw to leak or corrupt QEMU memory bytes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8743",
"url": "https://www.suse.com/security/cve/CVE-2015-8743"
},
{
"category": "external",
"summary": "SUSE Bug 960725 for CVE-2015-8743",
"url": "https://bugzilla.suse.com/960725"
},
{
"category": "external",
"summary": "SUSE Bug 960726 for CVE-2015-8743",
"url": "https://bugzilla.suse.com/960726"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "moderate"
}
],
"title": "CVE-2015-8743"
},
{
"cve": "CVE-2015-8744",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8744"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It occurs when a guest sends a Layer-2 packet smaller than 22 bytes. A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8744",
"url": "https://www.suse.com/security/cve/CVE-2015-8744"
},
{
"category": "external",
"summary": "SUSE Bug 960835 for CVE-2015-8744",
"url": "https://bugzilla.suse.com/960835"
},
{
"category": "external",
"summary": "SUSE Bug 960836 for CVE-2015-8744",
"url": "https://bugzilla.suse.com/960836"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "low"
}
],
"title": "CVE-2015-8744"
},
{
"cve": "CVE-2015-8745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8745"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It could occur while reading Interrupt Mask Registers (IMR). A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8745",
"url": "https://www.suse.com/security/cve/CVE-2015-8745"
},
{
"category": "external",
"summary": "SUSE Bug 960707 for CVE-2015-8745",
"url": "https://bugzilla.suse.com/960707"
},
{
"category": "external",
"summary": "SUSE Bug 960708 for CVE-2015-8745",
"url": "https://bugzilla.suse.com/960708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "low"
}
],
"title": "CVE-2015-8745"
},
{
"cve": "CVE-2015-8817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8817"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built to use \u0027address_space_translate\u0027 to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pci_dma_read/write calls. Affects QEMU versions \u003e= 1.6.0 and \u003c= 2.3.1. A privileged user inside guest could use this flaw to crash the guest instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8817",
"url": "https://www.suse.com/security/cve/CVE-2015-8817"
},
{
"category": "external",
"summary": "SUSE Bug 969121 for CVE-2015-8817",
"url": "https://bugzilla.suse.com/969121"
},
{
"category": "external",
"summary": "SUSE Bug 969122 for CVE-2015-8817",
"url": "https://bugzilla.suse.com/969122"
},
{
"category": "external",
"summary": "SUSE Bug 969125 for CVE-2015-8817",
"url": "https://bugzilla.suse.com/969125"
},
{
"category": "external",
"summary": "SUSE Bug 969126 for CVE-2015-8817",
"url": "https://bugzilla.suse.com/969126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "moderate"
}
],
"title": "CVE-2015-8817"
},
{
"cve": "CVE-2015-8818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8818"
}
],
"notes": [
{
"category": "general",
"text": "The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8818",
"url": "https://www.suse.com/security/cve/CVE-2015-8818"
},
{
"category": "external",
"summary": "SUSE Bug 969122 for CVE-2015-8818",
"url": "https://bugzilla.suse.com/969122"
},
{
"category": "external",
"summary": "SUSE Bug 969125 for CVE-2015-8818",
"url": "https://bugzilla.suse.com/969125"
},
{
"category": "external",
"summary": "SUSE Bug 969126 for CVE-2015-8818",
"url": "https://bugzilla.suse.com/969126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "moderate"
}
],
"title": "CVE-2015-8818"
},
{
"cve": "CVE-2016-1568",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1568"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHCI Native Command Queuing (NCQ) AIO command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1568",
"url": "https://www.suse.com/security/cve/CVE-2016-1568"
},
{
"category": "external",
"summary": "SUSE Bug 961332 for CVE-2016-1568",
"url": "https://bugzilla.suse.com/961332"
},
{
"category": "external",
"summary": "SUSE Bug 961333 for CVE-2016-1568",
"url": "https://bugzilla.suse.com/961333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "moderate"
}
],
"title": "CVE-2016-1568"
},
{
"cve": "CVE-2016-1570",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1570"
}
],
"notes": [
{
"category": "general",
"text": "The PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x allows local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page identifier (MFN) to the (1) MMUEXT_MARK_SUPER or (2) MMUEXT_UNMARK_SUPER sub-op in the HYPERVISOR_mmuext_op hypercall or (3) unknown vectors related to page table updates.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1570",
"url": "https://www.suse.com/security/cve/CVE-2016-1570"
},
{
"category": "external",
"summary": "SUSE Bug 960861 for CVE-2016-1570",
"url": "https://bugzilla.suse.com/960861"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "important"
}
],
"title": "CVE-2016-1570"
},
{
"cve": "CVE-2016-1571",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1571"
}
],
"notes": [
{
"category": "general",
"text": "The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service (host crash) via a non-canonical guest address in an INVVPID instruction, which triggers a hypervisor bug check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1571",
"url": "https://www.suse.com/security/cve/CVE-2016-1571"
},
{
"category": "external",
"summary": "SUSE Bug 960861 for CVE-2016-1571",
"url": "https://bugzilla.suse.com/960861"
},
{
"category": "external",
"summary": "SUSE Bug 960862 for CVE-2016-1571",
"url": "https://bugzilla.suse.com/960862"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "moderate"
}
],
"title": "CVE-2016-1571"
},
{
"cve": "CVE-2016-1714",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1714"
}
],
"notes": [
{
"category": "general",
"text": "The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAP_SYS_RAWIO privilege to cause a denial of service (out-of-bounds read or write access and process crash) or possibly execute arbitrary code via an invalid current entry value in a firmware configuration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1714",
"url": "https://www.suse.com/security/cve/CVE-2016-1714"
},
{
"category": "external",
"summary": "SUSE Bug 961691 for CVE-2016-1714",
"url": "https://bugzilla.suse.com/961691"
},
{
"category": "external",
"summary": "SUSE Bug 961692 for CVE-2016-1714",
"url": "https://bugzilla.suse.com/961692"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "moderate"
}
],
"title": "CVE-2016-1714"
},
{
"cve": "CVE-2016-1922",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1922"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp interface. In that, \u0027current_cpu\u0027 remains null, which leads to the null pointer dereference. A user or process could use this flaw to crash the QEMU instance, resulting in DoS issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1922",
"url": "https://www.suse.com/security/cve/CVE-2016-1922"
},
{
"category": "external",
"summary": "SUSE Bug 962320 for CVE-2016-1922",
"url": "https://bugzilla.suse.com/962320"
},
{
"category": "external",
"summary": "SUSE Bug 962321 for CVE-2016-1922",
"url": "https://bugzilla.suse.com/962321"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "low"
}
],
"title": "CVE-2016-1922"
},
{
"cve": "CVE-2016-1981",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1981"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue. It could occur while processing data via transmit or receive descriptors, provided the initial receive/transmit descriptor head (TDH/RDH) is set outside the allocated descriptor buffer. A privileged user inside guest could use this flaw to crash the QEMU instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1981",
"url": "https://www.suse.com/security/cve/CVE-2016-1981"
},
{
"category": "external",
"summary": "SUSE Bug 963782 for CVE-2016-1981",
"url": "https://bugzilla.suse.com/963782"
},
{
"category": "external",
"summary": "SUSE Bug 963783 for CVE-2016-1981",
"url": "https://bugzilla.suse.com/963783"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "low"
}
],
"title": "CVE-2016-1981"
},
{
"cve": "CVE-2016-2198",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2198"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null pointer dereference flaw. It could occur when an application attempts to write to EHCI capabilities registers. A privileged user inside quest could use this flaw to crash the QEMU process instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2198",
"url": "https://www.suse.com/security/cve/CVE-2016-2198"
},
{
"category": "external",
"summary": "SUSE Bug 964413 for CVE-2016-2198",
"url": "https://bugzilla.suse.com/964413"
},
{
"category": "external",
"summary": "SUSE Bug 964415 for CVE-2016-2198",
"url": "https://bugzilla.suse.com/964415"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "low"
}
],
"title": "CVE-2016-2198"
},
{
"cve": "CVE-2016-2270",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2270"
}
],
"notes": [
{
"category": "general",
"text": "Xen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2270",
"url": "https://www.suse.com/security/cve/CVE-2016-2270"
},
{
"category": "external",
"summary": "SUSE Bug 965315 for CVE-2016-2270",
"url": "https://bugzilla.suse.com/965315"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "moderate"
}
],
"title": "CVE-2016-2270"
},
{
"cve": "CVE-2016-2271",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2271"
}
],
"notes": [
{
"category": "general",
"text": "VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to cause a denial of service (guest crash) via vectors related to a non-canonical RIP.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2271",
"url": "https://www.suse.com/security/cve/CVE-2016-2271"
},
{
"category": "external",
"summary": "SUSE Bug 965317 for CVE-2016-2271",
"url": "https://bugzilla.suse.com/965317"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "moderate"
}
],
"title": "CVE-2016-2271"
},
{
"cve": "CVE-2016-2391",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2391"
}
],
"notes": [
{
"category": "general",
"text": "The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors related to multiple eof_timers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2391",
"url": "https://www.suse.com/security/cve/CVE-2016-2391"
},
{
"category": "external",
"summary": "SUSE Bug 967012 for CVE-2016-2391",
"url": "https://bugzilla.suse.com/967012"
},
{
"category": "external",
"summary": "SUSE Bug 967013 for CVE-2016-2391",
"url": "https://bugzilla.suse.com/967013"
},
{
"category": "external",
"summary": "SUSE Bug 967101 for CVE-2016-2391",
"url": "https://bugzilla.suse.com/967101"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "low"
}
],
"title": "CVE-2016-2391"
},
{
"cve": "CVE-2016-2392",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2392"
}
],
"notes": [
{
"category": "general",
"text": "The is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 does not properly validate USB configuration descriptor objects, which allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving a remote NDIS control message packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2392",
"url": "https://www.suse.com/security/cve/CVE-2016-2392"
},
{
"category": "external",
"summary": "SUSE Bug 967012 for CVE-2016-2392",
"url": "https://bugzilla.suse.com/967012"
},
{
"category": "external",
"summary": "SUSE Bug 967090 for CVE-2016-2392",
"url": "https://bugzilla.suse.com/967090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "low"
}
],
"title": "CVE-2016-2392"
},
{
"cve": "CVE-2016-2538",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2538"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 allow local guest OS administrators to cause a denial of service (QEMU process crash) or obtain sensitive host memory information via a remote NDIS control message packet that is mishandled in the (1) rndis_query_response, (2) rndis_set_response, or (3) usb_net_handle_dataout function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2538",
"url": "https://www.suse.com/security/cve/CVE-2016-2538"
},
{
"category": "external",
"summary": "SUSE Bug 967969 for CVE-2016-2538",
"url": "https://bugzilla.suse.com/967969"
},
{
"category": "external",
"summary": "SUSE Bug 968004 for CVE-2016-2538",
"url": "https://bugzilla.suse.com/968004"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "important"
}
],
"title": "CVE-2016-2538"
},
{
"cve": "CVE-2016-2841",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2841"
}
],
"notes": [
{
"category": "general",
"text": "The ne2000_receive function in the NE2000 NIC emulation support (hw/net/ne2000.c) in QEMU before 2.5.1 allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via crafted values for the PSTART and PSTOP registers, involving ring buffer control.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2841",
"url": "https://www.suse.com/security/cve/CVE-2016-2841"
},
{
"category": "external",
"summary": "SUSE Bug 969350 for CVE-2016-2841",
"url": "https://bugzilla.suse.com/969350"
},
{
"category": "external",
"summary": "SUSE Bug 969351 for CVE-2016-2841",
"url": "https://bugzilla.suse.com/969351"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_02_3.0.101_68-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_02_3.0.101_68-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_02-32.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.i586",
"SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_02-32.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-04-05T11:27:02Z",
"details": "low"
}
],
"title": "CVE-2016-2841"
}
]
}
suse-su-2016:0873-1
Vulnerability from csaf_suse
Published
2016-03-24 08:10
Modified
2016-03-24 08:10
Summary
Security update for xen
Notes
Title of the patch
Security update for xen
Description of the patch
xen was updated to fix 44 security issues.
These security issues were fixed:
- CVE-2013-4533: Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s->rx_level value in a savevm image (bsc#864655).
- CVE-2013-4534: Buffer overflow in hw/intc/openpic.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via vectors related to IRQDest elements (bsc#864811).
- CVE-2013-4537: The ssi_sd_transfer function in hw/sd/ssi-sd.c allowed remote attackers to execute arbitrary code via a crafted arglen value in a savevm image (bsc#864391).
- CVE-2013-4538: Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c allowed remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted (1) cmd_len, (2) row, or (3) col values; (4) row_start and row_end values; or (5) col_star and col_end values in a savevm image (bsc#864769).
- CVE-2013-4539: Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c might have allowed remote attackers to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image (bsc#864805).
- CVE-2014-0222: Integer overflow in the qcow_open function in block/qcow.c allowed remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image (bsc#877642).
- CVE-2014-3640: The sosendto function in slirp/udp.c allowed local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket (bsc#897654).
- CVE-2014-3689: The vmware-vga driver (hw/display/vmware_vga.c) allowed local guest users to write to qemu memory locations and gain privileges via unspecified parameters related to rectangle handling (bsc#901508).
- CVE-2014-7815: The set_pixel_format function in ui/vnc.c allowed remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value (bsc#902737).
- CVE-2014-9718: The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality had multiple interpretations of a function's return value, which allowed guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and system crash) via a PRDT with zero complete sectors, related to the bmdma_prepare_buf and ahci_dma_prepare_buf functions (bsc#928393).
- CVE-2015-1779: The VNC websocket frame decoder allowed remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section (bsc#924018).
- CVE-2015-5278: Infinite loop in ne2000_receive() function (bsc#945989).
- CVE-2015-6855: hw/ide/core.c did not properly restrict the commands accepted by an ATAPI device, which allowed guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash (bsc#945404).
- CVE-2015-7512: Buffer overflow in the pcnet_receive function in hw/net/pcnet.c, when a guest NIC has a larger MTU, allowed remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet (bsc#957162).
- CVE-2015-7549: pci: NULL pointer dereference issue (bsc#958917).
- CVE-2015-8345: eepro100: infinite loop in processing command block list (bsc#956829).
- CVE-2015-8504: VNC: floating point exception (bsc#958491).
- CVE-2015-8550: Paravirtualized drivers were incautious about shared memory contents (XSA-155) (bsc#957988).
- CVE-2015-8554: qemu-dm buffer overrun in MSI-X handling (XSA-164) (bsc#958007).
- CVE-2015-8555: Information leak in legacy x86 FPU/XMM initialization (XSA-165) (bsc#958009).
- CVE-2015-8558: Infinite loop in ehci_advance_state resulted in DoS (bsc#959005).
- CVE-2015-8567: vmxnet3: host memory leakage (bsc#959387).
- CVE-2015-8568: vmxnet3: host memory leakage (bsc#959387).
- CVE-2015-8613: SCSI: stack based buffer overflow in megasas_ctrl_get_info (bsc#961358).
- CVE-2015-8619: Stack based OOB write in hmp_sendkey routine (bsc#960334).
- CVE-2015-8743: ne2000: OOB memory access in ioport r/w functions (bsc#960725).
- CVE-2015-8744: vmxnet3: Incorrect l2 header validation lead to a crash via assert(2) call (bsc#960835).
- CVE-2015-8745: Reading IMR registers lead to a crash via assert(2) call (bsc#960707).
- CVE-2015-8817: OOB access in address_space_rw lead to segmentation fault (I) (bsc#969121).
- CVE-2015-8818: OOB access in address_space_rw lead to segmentation fault (II) (bsc#969122).
- CVE-2016-1568: AHCI use-after-free vulnerability in aio port commands (bsc#961332).
- CVE-2016-1570: The PV superpage functionality in arch/x86/mm.c allowed local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page identifier (MFN) to the (1) MMUEXT_MARK_SUPER or (2) MMUEXT_UNMARK_SUPER sub-op in the HYPERVISOR_mmuext_op hypercall or (3) unknown vectors related to page table updates (bsc#960861).
- CVE-2016-1571: VMX: intercept issue with INVLPG on non-canonical address (XSA-168) (bsc#960862).
- CVE-2016-1714: nvram: OOB r/w access in processing firmware configurations (bsc#961691).
- CVE-2016-1922: NULL pointer dereference in vapic_write() (bsc#962320).
- CVE-2016-1981: e1000 infinite loop in start_xmit and e1000_receive_iov routines (bsc#963782).
- CVE-2016-2198: EHCI NULL pointer dereference in ehci_caps_write (bsc#964413).
- CVE-2016-2270: Xen allowed local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings (bsc#965315).
- CVE-2016-2271: VMX when using an Intel or Cyrix CPU, allowed local HVM guest users to cause a denial of service (guest crash) via vectors related to a non-canonical RIP (bsc#965317).
- CVE-2016-2391: usb: multiple eof_timers in ohci module lead to NULL pointer dereference (bsc#967013).
- CVE-2016-2392: NULL pointer dereference in remote NDIS control message handling (bsc#967012).
- CVE-2016-2538: Integer overflow in remote NDIS control message handling (bsc#967969).
- CVE-2016-2841: ne2000: Infinite loop in ne2000_receive (bsc#969350).
- XSA-166: ioreq handling possibly susceptible to multiple read issue (bsc#958523).
These non-security issues were fixed:
- bsc#954872: script block-dmmd not working as expected
- bsc#957698: DOM0 can't bring up on Dell PC
- bsc#963923: domain weights not honored when sched-credit tslice is reduced
- bsc#959332: SLES12SP1 PV guest is unreachable when restored or migrated
- bsc#959695: Missing docs for xen
Patchnames
SUSE-SLE-DESKTOP-12-SP1-2016-508,SUSE-SLE-SDK-12-SP1-2016-508,SUSE-SLE-SERVER-12-SP1-2016-508
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for xen",
"title": "Title of the patch"
},
{
"category": "description",
"text": "xen was updated to fix 44 security issues.\n\nThese security issues were fixed:\n- CVE-2013-4533: Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s-\u003erx_level value in a savevm image (bsc#864655).\n- CVE-2013-4534: Buffer overflow in hw/intc/openpic.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via vectors related to IRQDest elements (bsc#864811).\n- CVE-2013-4537: The ssi_sd_transfer function in hw/sd/ssi-sd.c allowed remote attackers to execute arbitrary code via a crafted arglen value in a savevm image (bsc#864391).\n- CVE-2013-4538: Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c allowed remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted (1) cmd_len, (2) row, or (3) col values; (4) row_start and row_end values; or (5) col_star and col_end values in a savevm image (bsc#864769).\n- CVE-2013-4539: Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c might have allowed remote attackers to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image (bsc#864805).\n- CVE-2014-0222: Integer overflow in the qcow_open function in block/qcow.c allowed remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image (bsc#877642).\n- CVE-2014-3640: The sosendto function in slirp/udp.c allowed local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket (bsc#897654).\n- CVE-2014-3689: The vmware-vga driver (hw/display/vmware_vga.c) allowed local guest users to write to qemu memory locations and gain privileges via unspecified parameters related to rectangle handling (bsc#901508).\n- CVE-2014-7815: The set_pixel_format function in ui/vnc.c allowed remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value (bsc#902737).\n- CVE-2014-9718: The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality had multiple interpretations of a function\u0027s return value, which allowed guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and system crash) via a PRDT with zero complete sectors, related to the bmdma_prepare_buf and ahci_dma_prepare_buf functions (bsc#928393).\n- CVE-2015-1779: The VNC websocket frame decoder allowed remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section (bsc#924018).\n- CVE-2015-5278: Infinite loop in ne2000_receive() function (bsc#945989).\n- CVE-2015-6855: hw/ide/core.c did not properly restrict the commands accepted by an ATAPI device, which allowed guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash (bsc#945404).\n- CVE-2015-7512: Buffer overflow in the pcnet_receive function in hw/net/pcnet.c, when a guest NIC has a larger MTU, allowed remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet (bsc#957162).\n- CVE-2015-7549: pci: NULL pointer dereference issue (bsc#958917).\n- CVE-2015-8345: eepro100: infinite loop in processing command block list (bsc#956829).\n- CVE-2015-8504: VNC: floating point exception (bsc#958491).\n- CVE-2015-8550: Paravirtualized drivers were incautious about shared memory contents (XSA-155) (bsc#957988).\n- CVE-2015-8554: qemu-dm buffer overrun in MSI-X handling (XSA-164) (bsc#958007).\n- CVE-2015-8555: Information leak in legacy x86 FPU/XMM initialization (XSA-165) (bsc#958009).\n- CVE-2015-8558: Infinite loop in ehci_advance_state resulted in DoS (bsc#959005).\n- CVE-2015-8567: vmxnet3: host memory leakage (bsc#959387).\n- CVE-2015-8568: vmxnet3: host memory leakage (bsc#959387).\n- CVE-2015-8613: SCSI: stack based buffer overflow in megasas_ctrl_get_info (bsc#961358).\n- CVE-2015-8619: Stack based OOB write in hmp_sendkey routine (bsc#960334).\n- CVE-2015-8743: ne2000: OOB memory access in ioport r/w functions (bsc#960725).\n- CVE-2015-8744: vmxnet3: Incorrect l2 header validation lead to a crash via assert(2) call (bsc#960835).\n- CVE-2015-8745: Reading IMR registers lead to a crash via assert(2) call (bsc#960707).\n- CVE-2015-8817: OOB access in address_space_rw lead to segmentation fault (I) (bsc#969121).\n- CVE-2015-8818: OOB access in address_space_rw lead to segmentation fault (II) (bsc#969122).\n- CVE-2016-1568: AHCI use-after-free vulnerability in aio port commands (bsc#961332).\n- CVE-2016-1570: The PV superpage functionality in arch/x86/mm.c allowed local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page identifier (MFN) to the (1) MMUEXT_MARK_SUPER or (2) MMUEXT_UNMARK_SUPER sub-op in the HYPERVISOR_mmuext_op hypercall or (3) unknown vectors related to page table updates (bsc#960861).\n- CVE-2016-1571: VMX: intercept issue with INVLPG on non-canonical address (XSA-168) (bsc#960862).\n- CVE-2016-1714: nvram: OOB r/w access in processing firmware configurations (bsc#961691).\n- CVE-2016-1922: NULL pointer dereference in vapic_write() (bsc#962320).\n- CVE-2016-1981: e1000 infinite loop in start_xmit and e1000_receive_iov routines (bsc#963782).\n- CVE-2016-2198: EHCI NULL pointer dereference in ehci_caps_write (bsc#964413).\n- CVE-2016-2270: Xen allowed local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings (bsc#965315).\n- CVE-2016-2271: VMX when using an Intel or Cyrix CPU, allowed local HVM guest users to cause a denial of service (guest crash) via vectors related to a non-canonical RIP (bsc#965317).\n- CVE-2016-2391: usb: multiple eof_timers in ohci module lead to NULL pointer dereference (bsc#967013).\n- CVE-2016-2392: NULL pointer dereference in remote NDIS control message handling (bsc#967012).\n- CVE-2016-2538: Integer overflow in remote NDIS control message handling (bsc#967969).\n- CVE-2016-2841: ne2000: Infinite loop in ne2000_receive (bsc#969350).\n- XSA-166: ioreq handling possibly susceptible to multiple read issue (bsc#958523).\n\nThese non-security issues were fixed:\n- bsc#954872: script block-dmmd not working as expected \n- bsc#957698: DOM0 can\u0027t bring up on Dell PC\n- bsc#963923: domain weights not honored when sched-credit tslice is reduced\n- bsc#959332: SLES12SP1 PV guest is unreachable when restored or migrated\n- bsc#959695: Missing docs for xen\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-DESKTOP-12-SP1-2016-508,SUSE-SLE-SDK-12-SP1-2016-508,SUSE-SLE-SERVER-12-SP1-2016-508",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_0873-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2016:0873-1",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20160873-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2016:0873-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2016-March/001967.html"
},
{
"category": "self",
"summary": "SUSE Bug 864391",
"url": "https://bugzilla.suse.com/864391"
},
{
"category": "self",
"summary": "SUSE Bug 864655",
"url": "https://bugzilla.suse.com/864655"
},
{
"category": "self",
"summary": "SUSE Bug 864769",
"url": "https://bugzilla.suse.com/864769"
},
{
"category": "self",
"summary": "SUSE Bug 864805",
"url": "https://bugzilla.suse.com/864805"
},
{
"category": "self",
"summary": "SUSE Bug 864811",
"url": "https://bugzilla.suse.com/864811"
},
{
"category": "self",
"summary": "SUSE Bug 877642",
"url": "https://bugzilla.suse.com/877642"
},
{
"category": "self",
"summary": "SUSE Bug 897654",
"url": "https://bugzilla.suse.com/897654"
},
{
"category": "self",
"summary": "SUSE Bug 901508",
"url": "https://bugzilla.suse.com/901508"
},
{
"category": "self",
"summary": "SUSE Bug 902737",
"url": "https://bugzilla.suse.com/902737"
},
{
"category": "self",
"summary": "SUSE Bug 924018",
"url": "https://bugzilla.suse.com/924018"
},
{
"category": "self",
"summary": "SUSE Bug 928393",
"url": "https://bugzilla.suse.com/928393"
},
{
"category": "self",
"summary": "SUSE Bug 945404",
"url": "https://bugzilla.suse.com/945404"
},
{
"category": "self",
"summary": "SUSE Bug 945989",
"url": "https://bugzilla.suse.com/945989"
},
{
"category": "self",
"summary": "SUSE Bug 954872",
"url": "https://bugzilla.suse.com/954872"
},
{
"category": "self",
"summary": "SUSE Bug 956829",
"url": "https://bugzilla.suse.com/956829"
},
{
"category": "self",
"summary": "SUSE Bug 957162",
"url": "https://bugzilla.suse.com/957162"
},
{
"category": "self",
"summary": "SUSE Bug 957698",
"url": "https://bugzilla.suse.com/957698"
},
{
"category": "self",
"summary": "SUSE Bug 957988",
"url": "https://bugzilla.suse.com/957988"
},
{
"category": "self",
"summary": "SUSE Bug 958007",
"url": "https://bugzilla.suse.com/958007"
},
{
"category": "self",
"summary": "SUSE Bug 958009",
"url": "https://bugzilla.suse.com/958009"
},
{
"category": "self",
"summary": "SUSE Bug 958491",
"url": "https://bugzilla.suse.com/958491"
},
{
"category": "self",
"summary": "SUSE Bug 958523",
"url": "https://bugzilla.suse.com/958523"
},
{
"category": "self",
"summary": "SUSE Bug 958917",
"url": "https://bugzilla.suse.com/958917"
},
{
"category": "self",
"summary": "SUSE Bug 959005",
"url": "https://bugzilla.suse.com/959005"
},
{
"category": "self",
"summary": "SUSE Bug 959332",
"url": "https://bugzilla.suse.com/959332"
},
{
"category": "self",
"summary": "SUSE Bug 959387",
"url": "https://bugzilla.suse.com/959387"
},
{
"category": "self",
"summary": "SUSE Bug 959695",
"url": "https://bugzilla.suse.com/959695"
},
{
"category": "self",
"summary": "SUSE Bug 960334",
"url": "https://bugzilla.suse.com/960334"
},
{
"category": "self",
"summary": "SUSE Bug 960707",
"url": "https://bugzilla.suse.com/960707"
},
{
"category": "self",
"summary": "SUSE Bug 960725",
"url": "https://bugzilla.suse.com/960725"
},
{
"category": "self",
"summary": "SUSE Bug 960835",
"url": "https://bugzilla.suse.com/960835"
},
{
"category": "self",
"summary": "SUSE Bug 960861",
"url": "https://bugzilla.suse.com/960861"
},
{
"category": "self",
"summary": "SUSE Bug 960862",
"url": "https://bugzilla.suse.com/960862"
},
{
"category": "self",
"summary": "SUSE Bug 961332",
"url": "https://bugzilla.suse.com/961332"
},
{
"category": "self",
"summary": "SUSE Bug 961358",
"url": "https://bugzilla.suse.com/961358"
},
{
"category": "self",
"summary": "SUSE Bug 961691",
"url": "https://bugzilla.suse.com/961691"
},
{
"category": "self",
"summary": "SUSE Bug 962320",
"url": "https://bugzilla.suse.com/962320"
},
{
"category": "self",
"summary": "SUSE Bug 963782",
"url": "https://bugzilla.suse.com/963782"
},
{
"category": "self",
"summary": "SUSE Bug 963923",
"url": "https://bugzilla.suse.com/963923"
},
{
"category": "self",
"summary": "SUSE Bug 964413",
"url": "https://bugzilla.suse.com/964413"
},
{
"category": "self",
"summary": "SUSE Bug 965315",
"url": "https://bugzilla.suse.com/965315"
},
{
"category": "self",
"summary": "SUSE Bug 965317",
"url": "https://bugzilla.suse.com/965317"
},
{
"category": "self",
"summary": "SUSE Bug 967012",
"url": "https://bugzilla.suse.com/967012"
},
{
"category": "self",
"summary": "SUSE Bug 967013",
"url": "https://bugzilla.suse.com/967013"
},
{
"category": "self",
"summary": "SUSE Bug 967969",
"url": "https://bugzilla.suse.com/967969"
},
{
"category": "self",
"summary": "SUSE Bug 969121",
"url": "https://bugzilla.suse.com/969121"
},
{
"category": "self",
"summary": "SUSE Bug 969122",
"url": "https://bugzilla.suse.com/969122"
},
{
"category": "self",
"summary": "SUSE Bug 969350",
"url": "https://bugzilla.suse.com/969350"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4533 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4534 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4534/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4537 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4537/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4538 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4538/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4539 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0222 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0222/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3640 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3640/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3689 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3689/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7815 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-9718 page",
"url": "https://www.suse.com/security/cve/CVE-2014-9718/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1779 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1779/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5278 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5278/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6855 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6855/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7512 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7512/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7549 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7549/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8345 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8345/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8504 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8504/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8550 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8550/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8554 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8554/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8555 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8555/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8558 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8558/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8567 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8567/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8568 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8568/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8613 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8613/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8619 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8619/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8743 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8743/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8744 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8744/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8745 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8817 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8818 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1568 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1568/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1570 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1570/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1571 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1571/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1714 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1714/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1922 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1922/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1981 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1981/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2198 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2198/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2270 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2270/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2271 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2271/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2391 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2391/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2392 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2392/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2538 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2538/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2841 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2841/"
}
],
"title": "Security update for xen",
"tracking": {
"current_release_date": "2016-03-24T08:10:03Z",
"generator": {
"date": "2016-03-24T08:10:03Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2016:0873-1",
"initial_release_date": "2016-03-24T08:10:03Z",
"revision_history": [
{
"date": "2016-03-24T08:10:03Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "xen-4.5.2_06-7.1.x86_64",
"product": {
"name": "xen-4.5.2_06-7.1.x86_64",
"product_id": "xen-4.5.2_06-7.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"product": {
"name": "xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"product_id": "xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-libs-4.5.2_06-7.1.x86_64",
"product": {
"name": "xen-libs-4.5.2_06-7.1.x86_64",
"product_id": "xen-libs-4.5.2_06-7.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-libs-32bit-4.5.2_06-7.1.x86_64",
"product": {
"name": "xen-libs-32bit-4.5.2_06-7.1.x86_64",
"product_id": "xen-libs-32bit-4.5.2_06-7.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-devel-4.5.2_06-7.1.x86_64",
"product": {
"name": "xen-devel-4.5.2_06-7.1.x86_64",
"product_id": "xen-devel-4.5.2_06-7.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-doc-html-4.5.2_06-7.1.x86_64",
"product": {
"name": "xen-doc-html-4.5.2_06-7.1.x86_64",
"product_id": "xen-doc-html-4.5.2_06-7.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-tools-4.5.2_06-7.1.x86_64",
"product": {
"name": "xen-tools-4.5.2_06-7.1.x86_64",
"product_id": "xen-tools-4.5.2_06-7.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-tools-domU-4.5.2_06-7.1.x86_64",
"product": {
"name": "xen-tools-domU-4.5.2_06-7.1.x86_64",
"product_id": "xen-tools-domU-4.5.2_06-7.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12:sp1"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12:sp1"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-4.5.2_06-7.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64"
},
"product_reference": "xen-4.5.2_06-7.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64"
},
"product_reference": "xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-4.5.2_06-7.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64"
},
"product_reference": "xen-libs-4.5.2_06-7.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-32bit-4.5.2_06-7.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
"product_id": "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64"
},
"product_reference": "xen-libs-32bit-4.5.2_06-7.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-4.5.2_06-7.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
"product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
},
"product_reference": "xen-devel-4.5.2_06-7.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-4.5.2_06-7.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64"
},
"product_reference": "xen-4.5.2_06-7.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-doc-html-4.5.2_06-7.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64"
},
"product_reference": "xen-doc-html-4.5.2_06-7.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64"
},
"product_reference": "xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-4.5.2_06-7.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64"
},
"product_reference": "xen-libs-4.5.2_06-7.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-32bit-4.5.2_06-7.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64"
},
"product_reference": "xen-libs-32bit-4.5.2_06-7.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-4.5.2_06-7.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64"
},
"product_reference": "xen-tools-4.5.2_06-7.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-domU-4.5.2_06-7.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
"product_id": "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64"
},
"product_reference": "xen-tools-domU-4.5.2_06-7.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-4.5.2_06-7.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64"
},
"product_reference": "xen-4.5.2_06-7.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-doc-html-4.5.2_06-7.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64"
},
"product_reference": "xen-doc-html-4.5.2_06-7.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64"
},
"product_reference": "xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-4.5.2_06-7.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64"
},
"product_reference": "xen-libs-4.5.2_06-7.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-32bit-4.5.2_06-7.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64"
},
"product_reference": "xen-libs-32bit-4.5.2_06-7.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-4.5.2_06-7.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64"
},
"product_reference": "xen-tools-4.5.2_06-7.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-domU-4.5.2_06-7.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64"
},
"product_reference": "xen-tools-domU-4.5.2_06-7.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2013-4533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4533"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s-\u003erx_level value in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4533",
"url": "https://www.suse.com/security/cve/CVE-2013-4533"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2013-4533",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 864655 for CVE-2013-4533",
"url": "https://bugzilla.suse.com/864655"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4533",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 964644 for CVE-2013-4533",
"url": "https://bugzilla.suse.com/964644"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "important"
}
],
"title": "CVE-2013-4533"
},
{
"cve": "CVE-2013-4534",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4534"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in hw/intc/openpic.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via vectors related to IRQDest elements.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4534",
"url": "https://www.suse.com/security/cve/CVE-2013-4534"
},
{
"category": "external",
"summary": "SUSE Bug 864811 for CVE-2013-4534",
"url": "https://bugzilla.suse.com/864811"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4534",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 964452 for CVE-2013-4534",
"url": "https://bugzilla.suse.com/964452"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "important"
}
],
"title": "CVE-2013-4534"
},
{
"cve": "CVE-2013-4537",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4537"
}
],
"notes": [
{
"category": "general",
"text": "The ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted arglen value in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4537",
"url": "https://www.suse.com/security/cve/CVE-2013-4537"
},
{
"category": "external",
"summary": "SUSE Bug 864391 for CVE-2013-4537",
"url": "https://bugzilla.suse.com/864391"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4537",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 962642 for CVE-2013-4537",
"url": "https://bugzilla.suse.com/962642"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "important"
}
],
"title": "CVE-2013-4537"
},
{
"cve": "CVE-2013-4538",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4538"
}
],
"notes": [
{
"category": "general",
"text": "Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c in QEMU before 1.7.2 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted (1) cmd_len, (2) row, or (3) col values; (4) row_start and row_end values; or (5) col_star and col_end values in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4538",
"url": "https://www.suse.com/security/cve/CVE-2013-4538"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2013-4538",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 864769 for CVE-2013-4538",
"url": "https://bugzilla.suse.com/864769"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4538",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 962335 for CVE-2013-4538",
"url": "https://bugzilla.suse.com/962335"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "important"
}
],
"title": "CVE-2013-4538"
},
{
"cve": "CVE-2013-4539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4539"
}
],
"notes": [
{
"category": "general",
"text": "Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4539",
"url": "https://www.suse.com/security/cve/CVE-2013-4539"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2013-4539",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 864805 for CVE-2013-4539",
"url": "https://bugzilla.suse.com/864805"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4539",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 962758 for CVE-2013-4539",
"url": "https://bugzilla.suse.com/962758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "important"
}
],
"title": "CVE-2013-4539"
},
{
"cve": "CVE-2014-0222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0222"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0222",
"url": "https://www.suse.com/security/cve/CVE-2014-0222"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2014-0222",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 877642 for CVE-2014-0222",
"url": "https://bugzilla.suse.com/877642"
},
{
"category": "external",
"summary": "SUSE Bug 950367 for CVE-2014-0222",
"url": "https://bugzilla.suse.com/950367"
},
{
"category": "external",
"summary": "SUSE Bug 964925 for CVE-2014-0222",
"url": "https://bugzilla.suse.com/964925"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "moderate"
}
],
"title": "CVE-2014-0222"
},
{
"cve": "CVE-2014-3640",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3640"
}
],
"notes": [
{
"category": "general",
"text": "The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3640",
"url": "https://www.suse.com/security/cve/CVE-2014-3640"
},
{
"category": "external",
"summary": "SUSE Bug 897654 for CVE-2014-3640",
"url": "https://bugzilla.suse.com/897654"
},
{
"category": "external",
"summary": "SUSE Bug 965112 for CVE-2014-3640",
"url": "https://bugzilla.suse.com/965112"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "important"
}
],
"title": "CVE-2014-3640"
},
{
"cve": "CVE-2014-3689",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3689"
}
],
"notes": [
{
"category": "general",
"text": "The vmware-vga driver (hw/display/vmware_vga.c) in QEMU allows local guest users to write to qemu memory locations and gain privileges via unspecified parameters related to rectangle handling.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3689",
"url": "https://www.suse.com/security/cve/CVE-2014-3689"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2014-3689",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 1189862 for CVE-2014-3689",
"url": "https://bugzilla.suse.com/1189862"
},
{
"category": "external",
"summary": "SUSE Bug 901508 for CVE-2014-3689",
"url": "https://bugzilla.suse.com/901508"
},
{
"category": "external",
"summary": "SUSE Bug 962611 for CVE-2014-3689",
"url": "https://bugzilla.suse.com/962611"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "important"
}
],
"title": "CVE-2014-3689"
},
{
"cve": "CVE-2014-7815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7815"
}
],
"notes": [
{
"category": "general",
"text": "The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7815",
"url": "https://www.suse.com/security/cve/CVE-2014-7815"
},
{
"category": "external",
"summary": "SUSE Bug 902737 for CVE-2014-7815",
"url": "https://bugzilla.suse.com/902737"
},
{
"category": "external",
"summary": "SUSE Bug 962627 for CVE-2014-7815",
"url": "https://bugzilla.suse.com/962627"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "moderate"
}
],
"title": "CVE-2014-7815"
},
{
"cve": "CVE-2014-9718",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-9718"
}
],
"notes": [
{
"category": "general",
"text": "The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality in QEMU 1.0 through 2.1.3 have multiple interpretations of a function\u0027s return value, which allows guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and system crash) via a PRDT with zero complete sectors, related to the bmdma_prepare_buf and ahci_dma_prepare_buf functions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-9718",
"url": "https://www.suse.com/security/cve/CVE-2014-9718"
},
{
"category": "external",
"summary": "SUSE Bug 928393 for CVE-2014-9718",
"url": "https://bugzilla.suse.com/928393"
},
{
"category": "external",
"summary": "SUSE Bug 964431 for CVE-2014-9718",
"url": "https://bugzilla.suse.com/964431"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "moderate"
}
],
"title": "CVE-2014-9718"
},
{
"cve": "CVE-2015-1779",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1779"
}
],
"notes": [
{
"category": "general",
"text": "The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1779",
"url": "https://www.suse.com/security/cve/CVE-2015-1779"
},
{
"category": "external",
"summary": "SUSE Bug 924018 for CVE-2015-1779",
"url": "https://bugzilla.suse.com/924018"
},
{
"category": "external",
"summary": "SUSE Bug 962632 for CVE-2015-1779",
"url": "https://bugzilla.suse.com/962632"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "moderate"
}
],
"title": "CVE-2015-1779"
},
{
"cve": "CVE-2015-5278",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5278"
}
],
"notes": [
{
"category": "general",
"text": "The ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service (infinite loop and instance crash) or possibly execute arbitrary code via vectors related to receiving packets.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5278",
"url": "https://www.suse.com/security/cve/CVE-2015-5278"
},
{
"category": "external",
"summary": "SUSE Bug 945989 for CVE-2015-5278",
"url": "https://bugzilla.suse.com/945989"
},
{
"category": "external",
"summary": "SUSE Bug 964947 for CVE-2015-5278",
"url": "https://bugzilla.suse.com/964947"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "moderate"
}
],
"title": "CVE-2015-5278"
},
{
"cve": "CVE-2015-6855",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6855"
}
],
"notes": [
{
"category": "general",
"text": "hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6855",
"url": "https://www.suse.com/security/cve/CVE-2015-6855"
},
{
"category": "external",
"summary": "SUSE Bug 945404 for CVE-2015-6855",
"url": "https://bugzilla.suse.com/945404"
},
{
"category": "external",
"summary": "SUSE Bug 965156 for CVE-2015-6855",
"url": "https://bugzilla.suse.com/965156"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "important"
}
],
"title": "CVE-2015-6855"
},
{
"cve": "CVE-2015-7512",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7512"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7512",
"url": "https://www.suse.com/security/cve/CVE-2015-7512"
},
{
"category": "external",
"summary": "SUSE Bug 957162 for CVE-2015-7512",
"url": "https://bugzilla.suse.com/957162"
},
{
"category": "external",
"summary": "SUSE Bug 962360 for CVE-2015-7512",
"url": "https://bugzilla.suse.com/962360"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "important"
}
],
"title": "CVE-2015-7512"
},
{
"cve": "CVE-2015-7549",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7549"
}
],
"notes": [
{
"category": "general",
"text": "The MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by leveraging failure to define the .write method.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7549",
"url": "https://www.suse.com/security/cve/CVE-2015-7549"
},
{
"category": "external",
"summary": "SUSE Bug 958917 for CVE-2015-7549",
"url": "https://bugzilla.suse.com/958917"
},
{
"category": "external",
"summary": "SUSE Bug 958918 for CVE-2015-7549",
"url": "https://bugzilla.suse.com/958918"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "low"
}
],
"title": "CVE-2015-7549"
},
{
"cve": "CVE-2015-8345",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8345"
}
],
"notes": [
{
"category": "general",
"text": "The eepro100 emulator in QEMU qemu-kvm blank allows local guest users to cause a denial of service (application crash and infinite loop) via vectors involving the command block list.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8345",
"url": "https://www.suse.com/security/cve/CVE-2015-8345"
},
{
"category": "external",
"summary": "SUSE Bug 956829 for CVE-2015-8345",
"url": "https://bugzilla.suse.com/956829"
},
{
"category": "external",
"summary": "SUSE Bug 956832 for CVE-2015-8345",
"url": "https://bugzilla.suse.com/956832"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "moderate"
}
],
"title": "CVE-2015-8345"
},
{
"cve": "CVE-2015-8504",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8504"
}
],
"notes": [
{
"category": "general",
"text": "Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service (arithmetic exception and application crash) via crafted SetPixelFormat messages from a client.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8504",
"url": "https://www.suse.com/security/cve/CVE-2015-8504"
},
{
"category": "external",
"summary": "SUSE Bug 958491 for CVE-2015-8504",
"url": "https://bugzilla.suse.com/958491"
},
{
"category": "external",
"summary": "SUSE Bug 958493 for CVE-2015-8504",
"url": "https://bugzilla.suse.com/958493"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "moderate"
}
],
"title": "CVE-2015-8504"
},
{
"cve": "CVE-2015-8550",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8550"
}
],
"notes": [
{
"category": "general",
"text": "Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8550",
"url": "https://www.suse.com/security/cve/CVE-2015-8550"
},
{
"category": "external",
"summary": "SUSE Bug 1020452 for CVE-2015-8550",
"url": "https://bugzilla.suse.com/1020452"
},
{
"category": "external",
"summary": "SUSE Bug 1052256 for CVE-2015-8550",
"url": "https://bugzilla.suse.com/1052256"
},
{
"category": "external",
"summary": "SUSE Bug 957988 for CVE-2015-8550",
"url": "https://bugzilla.suse.com/957988"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "important"
}
],
"title": "CVE-2015-8550"
},
{
"cve": "CVE-2015-8554",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8554"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional (aka qemu-dm) device model, allows local x86 HVM guest administrators to gain privileges by leveraging a system with access to a passed-through MSI-X capable physical PCI device and MSI-X table entries, related to a \"write path.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8554",
"url": "https://www.suse.com/security/cve/CVE-2015-8554"
},
{
"category": "external",
"summary": "SUSE Bug 958007 for CVE-2015-8554",
"url": "https://bugzilla.suse.com/958007"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "important"
}
],
"title": "CVE-2015-8554"
},
{
"cve": "CVE-2015-8555",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8555"
}
],
"notes": [
{
"category": "general",
"text": "Xen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize x86 FPU stack and XMM registers when XSAVE/XRSTOR are not used to manage guest extended register state, which allows local guest domains to obtain sensitive information from other domains via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8555",
"url": "https://www.suse.com/security/cve/CVE-2015-8555"
},
{
"category": "external",
"summary": "SUSE Bug 958009 for CVE-2015-8555",
"url": "https://bugzilla.suse.com/958009"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "important"
}
],
"title": "CVE-2015-8555"
},
{
"cve": "CVE-2015-8558",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8558"
}
],
"notes": [
{
"category": "general",
"text": "The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular isochronous transfer descriptor (iTD) list.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8558",
"url": "https://www.suse.com/security/cve/CVE-2015-8558"
},
{
"category": "external",
"summary": "SUSE Bug 959005 for CVE-2015-8558",
"url": "https://bugzilla.suse.com/959005"
},
{
"category": "external",
"summary": "SUSE Bug 959006 for CVE-2015-8558",
"url": "https://bugzilla.suse.com/959006"
},
{
"category": "external",
"summary": "SUSE Bug 976109 for CVE-2015-8558",
"url": "https://bugzilla.suse.com/976109"
},
{
"category": "external",
"summary": "SUSE Bug 976111 for CVE-2015-8558",
"url": "https://bugzilla.suse.com/976111"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "moderate"
}
],
"title": "CVE-2015-8558"
},
{
"cve": "CVE-2015-8567",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8567"
}
],
"notes": [
{
"category": "general",
"text": "Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8567",
"url": "https://www.suse.com/security/cve/CVE-2015-8567"
},
{
"category": "external",
"summary": "SUSE Bug 959386 for CVE-2015-8567",
"url": "https://bugzilla.suse.com/959386"
},
{
"category": "external",
"summary": "SUSE Bug 959387 for CVE-2015-8567",
"url": "https://bugzilla.suse.com/959387"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "low"
}
],
"title": "CVE-2015-8567"
},
{
"cve": "CVE-2015-8568",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8568"
}
],
"notes": [
{
"category": "general",
"text": "Memory leak in QEMU, when built with a VMWARE VMXNET3 paravirtual NIC emulator support, allows local guest users to cause a denial of service (host memory consumption) by trying to activate the vmxnet3 device repeatedly.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8568",
"url": "https://www.suse.com/security/cve/CVE-2015-8568"
},
{
"category": "external",
"summary": "SUSE Bug 959386 for CVE-2015-8568",
"url": "https://bugzilla.suse.com/959386"
},
{
"category": "external",
"summary": "SUSE Bug 959387 for CVE-2015-8568",
"url": "https://bugzilla.suse.com/959387"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "low"
}
],
"title": "CVE-2015-8568"
},
{
"cve": "CVE-2015-8613",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8613"
}
],
"notes": [
{
"category": "general",
"text": "Stack-based buffer overflow in the megasas_ctrl_get_info function in QEMU, when built with SCSI MegaRAID SAS HBA emulation support, allows local guest users to cause a denial of service (QEMU instance crash) via a crafted SCSI controller CTRL_GET_INFO command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8613",
"url": "https://www.suse.com/security/cve/CVE-2015-8613"
},
{
"category": "external",
"summary": "SUSE Bug 961358 for CVE-2015-8613",
"url": "https://bugzilla.suse.com/961358"
},
{
"category": "external",
"summary": "SUSE Bug 961556 for CVE-2015-8613",
"url": "https://bugzilla.suse.com/961556"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "moderate"
}
],
"title": "CVE-2015-8613"
},
{
"cve": "CVE-2015-8619",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8619"
}
],
"notes": [
{
"category": "general",
"text": "The Human Monitor Interface support in QEMU allows remote attackers to cause a denial of service (out-of-bounds write and application crash).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8619",
"url": "https://www.suse.com/security/cve/CVE-2015-8619"
},
{
"category": "external",
"summary": "SUSE Bug 960334 for CVE-2015-8619",
"url": "https://bugzilla.suse.com/960334"
},
{
"category": "external",
"summary": "SUSE Bug 965269 for CVE-2015-8619",
"url": "https://bugzilla.suse.com/965269"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "important"
}
],
"title": "CVE-2015-8619"
},
{
"cve": "CVE-2015-8743",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8743"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing \u0027ioport\u0027 r/w operations. A privileged (CAP_SYS_RAWIO) user/process could use this flaw to leak or corrupt QEMU memory bytes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8743",
"url": "https://www.suse.com/security/cve/CVE-2015-8743"
},
{
"category": "external",
"summary": "SUSE Bug 960725 for CVE-2015-8743",
"url": "https://bugzilla.suse.com/960725"
},
{
"category": "external",
"summary": "SUSE Bug 960726 for CVE-2015-8743",
"url": "https://bugzilla.suse.com/960726"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "moderate"
}
],
"title": "CVE-2015-8743"
},
{
"cve": "CVE-2015-8744",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8744"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It occurs when a guest sends a Layer-2 packet smaller than 22 bytes. A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8744",
"url": "https://www.suse.com/security/cve/CVE-2015-8744"
},
{
"category": "external",
"summary": "SUSE Bug 960835 for CVE-2015-8744",
"url": "https://bugzilla.suse.com/960835"
},
{
"category": "external",
"summary": "SUSE Bug 960836 for CVE-2015-8744",
"url": "https://bugzilla.suse.com/960836"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "low"
}
],
"title": "CVE-2015-8744"
},
{
"cve": "CVE-2015-8745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8745"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It could occur while reading Interrupt Mask Registers (IMR). A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8745",
"url": "https://www.suse.com/security/cve/CVE-2015-8745"
},
{
"category": "external",
"summary": "SUSE Bug 960707 for CVE-2015-8745",
"url": "https://bugzilla.suse.com/960707"
},
{
"category": "external",
"summary": "SUSE Bug 960708 for CVE-2015-8745",
"url": "https://bugzilla.suse.com/960708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "low"
}
],
"title": "CVE-2015-8745"
},
{
"cve": "CVE-2015-8817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8817"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built to use \u0027address_space_translate\u0027 to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pci_dma_read/write calls. Affects QEMU versions \u003e= 1.6.0 and \u003c= 2.3.1. A privileged user inside guest could use this flaw to crash the guest instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8817",
"url": "https://www.suse.com/security/cve/CVE-2015-8817"
},
{
"category": "external",
"summary": "SUSE Bug 969121 for CVE-2015-8817",
"url": "https://bugzilla.suse.com/969121"
},
{
"category": "external",
"summary": "SUSE Bug 969122 for CVE-2015-8817",
"url": "https://bugzilla.suse.com/969122"
},
{
"category": "external",
"summary": "SUSE Bug 969125 for CVE-2015-8817",
"url": "https://bugzilla.suse.com/969125"
},
{
"category": "external",
"summary": "SUSE Bug 969126 for CVE-2015-8817",
"url": "https://bugzilla.suse.com/969126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "moderate"
}
],
"title": "CVE-2015-8817"
},
{
"cve": "CVE-2015-8818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8818"
}
],
"notes": [
{
"category": "general",
"text": "The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8818",
"url": "https://www.suse.com/security/cve/CVE-2015-8818"
},
{
"category": "external",
"summary": "SUSE Bug 969122 for CVE-2015-8818",
"url": "https://bugzilla.suse.com/969122"
},
{
"category": "external",
"summary": "SUSE Bug 969125 for CVE-2015-8818",
"url": "https://bugzilla.suse.com/969125"
},
{
"category": "external",
"summary": "SUSE Bug 969126 for CVE-2015-8818",
"url": "https://bugzilla.suse.com/969126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "moderate"
}
],
"title": "CVE-2015-8818"
},
{
"cve": "CVE-2016-1568",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1568"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHCI Native Command Queuing (NCQ) AIO command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1568",
"url": "https://www.suse.com/security/cve/CVE-2016-1568"
},
{
"category": "external",
"summary": "SUSE Bug 961332 for CVE-2016-1568",
"url": "https://bugzilla.suse.com/961332"
},
{
"category": "external",
"summary": "SUSE Bug 961333 for CVE-2016-1568",
"url": "https://bugzilla.suse.com/961333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "moderate"
}
],
"title": "CVE-2016-1568"
},
{
"cve": "CVE-2016-1570",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1570"
}
],
"notes": [
{
"category": "general",
"text": "The PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x allows local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page identifier (MFN) to the (1) MMUEXT_MARK_SUPER or (2) MMUEXT_UNMARK_SUPER sub-op in the HYPERVISOR_mmuext_op hypercall or (3) unknown vectors related to page table updates.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1570",
"url": "https://www.suse.com/security/cve/CVE-2016-1570"
},
{
"category": "external",
"summary": "SUSE Bug 960861 for CVE-2016-1570",
"url": "https://bugzilla.suse.com/960861"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "important"
}
],
"title": "CVE-2016-1570"
},
{
"cve": "CVE-2016-1571",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1571"
}
],
"notes": [
{
"category": "general",
"text": "The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service (host crash) via a non-canonical guest address in an INVVPID instruction, which triggers a hypervisor bug check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1571",
"url": "https://www.suse.com/security/cve/CVE-2016-1571"
},
{
"category": "external",
"summary": "SUSE Bug 960861 for CVE-2016-1571",
"url": "https://bugzilla.suse.com/960861"
},
{
"category": "external",
"summary": "SUSE Bug 960862 for CVE-2016-1571",
"url": "https://bugzilla.suse.com/960862"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "moderate"
}
],
"title": "CVE-2016-1571"
},
{
"cve": "CVE-2016-1714",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1714"
}
],
"notes": [
{
"category": "general",
"text": "The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAP_SYS_RAWIO privilege to cause a denial of service (out-of-bounds read or write access and process crash) or possibly execute arbitrary code via an invalid current entry value in a firmware configuration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1714",
"url": "https://www.suse.com/security/cve/CVE-2016-1714"
},
{
"category": "external",
"summary": "SUSE Bug 961691 for CVE-2016-1714",
"url": "https://bugzilla.suse.com/961691"
},
{
"category": "external",
"summary": "SUSE Bug 961692 for CVE-2016-1714",
"url": "https://bugzilla.suse.com/961692"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "moderate"
}
],
"title": "CVE-2016-1714"
},
{
"cve": "CVE-2016-1922",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1922"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp interface. In that, \u0027current_cpu\u0027 remains null, which leads to the null pointer dereference. A user or process could use this flaw to crash the QEMU instance, resulting in DoS issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1922",
"url": "https://www.suse.com/security/cve/CVE-2016-1922"
},
{
"category": "external",
"summary": "SUSE Bug 962320 for CVE-2016-1922",
"url": "https://bugzilla.suse.com/962320"
},
{
"category": "external",
"summary": "SUSE Bug 962321 for CVE-2016-1922",
"url": "https://bugzilla.suse.com/962321"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "low"
}
],
"title": "CVE-2016-1922"
},
{
"cve": "CVE-2016-1981",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1981"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue. It could occur while processing data via transmit or receive descriptors, provided the initial receive/transmit descriptor head (TDH/RDH) is set outside the allocated descriptor buffer. A privileged user inside guest could use this flaw to crash the QEMU instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1981",
"url": "https://www.suse.com/security/cve/CVE-2016-1981"
},
{
"category": "external",
"summary": "SUSE Bug 963782 for CVE-2016-1981",
"url": "https://bugzilla.suse.com/963782"
},
{
"category": "external",
"summary": "SUSE Bug 963783 for CVE-2016-1981",
"url": "https://bugzilla.suse.com/963783"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "low"
}
],
"title": "CVE-2016-1981"
},
{
"cve": "CVE-2016-2198",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2198"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null pointer dereference flaw. It could occur when an application attempts to write to EHCI capabilities registers. A privileged user inside quest could use this flaw to crash the QEMU process instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2198",
"url": "https://www.suse.com/security/cve/CVE-2016-2198"
},
{
"category": "external",
"summary": "SUSE Bug 964413 for CVE-2016-2198",
"url": "https://bugzilla.suse.com/964413"
},
{
"category": "external",
"summary": "SUSE Bug 964415 for CVE-2016-2198",
"url": "https://bugzilla.suse.com/964415"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "low"
}
],
"title": "CVE-2016-2198"
},
{
"cve": "CVE-2016-2270",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2270"
}
],
"notes": [
{
"category": "general",
"text": "Xen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2270",
"url": "https://www.suse.com/security/cve/CVE-2016-2270"
},
{
"category": "external",
"summary": "SUSE Bug 965315 for CVE-2016-2270",
"url": "https://bugzilla.suse.com/965315"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "moderate"
}
],
"title": "CVE-2016-2270"
},
{
"cve": "CVE-2016-2271",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2271"
}
],
"notes": [
{
"category": "general",
"text": "VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to cause a denial of service (guest crash) via vectors related to a non-canonical RIP.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2271",
"url": "https://www.suse.com/security/cve/CVE-2016-2271"
},
{
"category": "external",
"summary": "SUSE Bug 965317 for CVE-2016-2271",
"url": "https://bugzilla.suse.com/965317"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "moderate"
}
],
"title": "CVE-2016-2271"
},
{
"cve": "CVE-2016-2391",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2391"
}
],
"notes": [
{
"category": "general",
"text": "The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors related to multiple eof_timers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2391",
"url": "https://www.suse.com/security/cve/CVE-2016-2391"
},
{
"category": "external",
"summary": "SUSE Bug 967012 for CVE-2016-2391",
"url": "https://bugzilla.suse.com/967012"
},
{
"category": "external",
"summary": "SUSE Bug 967013 for CVE-2016-2391",
"url": "https://bugzilla.suse.com/967013"
},
{
"category": "external",
"summary": "SUSE Bug 967101 for CVE-2016-2391",
"url": "https://bugzilla.suse.com/967101"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "low"
}
],
"title": "CVE-2016-2391"
},
{
"cve": "CVE-2016-2392",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2392"
}
],
"notes": [
{
"category": "general",
"text": "The is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 does not properly validate USB configuration descriptor objects, which allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving a remote NDIS control message packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2392",
"url": "https://www.suse.com/security/cve/CVE-2016-2392"
},
{
"category": "external",
"summary": "SUSE Bug 967012 for CVE-2016-2392",
"url": "https://bugzilla.suse.com/967012"
},
{
"category": "external",
"summary": "SUSE Bug 967090 for CVE-2016-2392",
"url": "https://bugzilla.suse.com/967090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "low"
}
],
"title": "CVE-2016-2392"
},
{
"cve": "CVE-2016-2538",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2538"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 allow local guest OS administrators to cause a denial of service (QEMU process crash) or obtain sensitive host memory information via a remote NDIS control message packet that is mishandled in the (1) rndis_query_response, (2) rndis_set_response, or (3) usb_net_handle_dataout function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2538",
"url": "https://www.suse.com/security/cve/CVE-2016-2538"
},
{
"category": "external",
"summary": "SUSE Bug 967969 for CVE-2016-2538",
"url": "https://bugzilla.suse.com/967969"
},
{
"category": "external",
"summary": "SUSE Bug 968004 for CVE-2016-2538",
"url": "https://bugzilla.suse.com/968004"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "important"
}
],
"title": "CVE-2016-2538"
},
{
"cve": "CVE-2016-2841",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2841"
}
],
"notes": [
{
"category": "general",
"text": "The ne2000_receive function in the NE2000 NIC emulation support (hw/net/ne2000.c) in QEMU before 2.5.1 allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via crafted values for the PSTART and PSTOP registers, involving ring buffer control.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2841",
"url": "https://www.suse.com/security/cve/CVE-2016-2841"
},
{
"category": "external",
"summary": "SUSE Bug 969350 for CVE-2016-2841",
"url": "https://bugzilla.suse.com/969350"
},
{
"category": "external",
"summary": "SUSE Bug 969351 for CVE-2016-2841",
"url": "https://bugzilla.suse.com/969351"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.2_06_k3.12.53_60.30-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.2_06-7.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.2_06-7.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-03-24T08:10:03Z",
"details": "low"
}
],
"title": "CVE-2016-2841"
}
]
}
suse-su-2016:1318-1
Vulnerability from csaf_suse
Published
2016-05-17 12:09
Modified
2016-05-17 12:09
Summary
Security update for xen
Notes
Title of the patch
Security update for xen
Description of the patch
xen was updated to fix 46 security issues.
These security issues were fixed:
- CVE-2013-4527: Buffer overflow in hw/timer/hpet.c might have allowed remote attackers to execute arbitrary code via vectors related to the number of timers (bsc#964746).
- CVE-2013-4529: Buffer overflow in hw/pci/pcie_aer.c allowed remote attackers to cause a denial of service and possibly execute arbitrary code via a large log_num value in a savevm image (bsc#964929).
- CVE-2013-4530: Buffer overflow in hw/ssi/pl022.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via crafted tx_fifo_head and rx_fifo_head values in a savevm image (bsc#964950).
- CVE-2013-4533: Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s->rx_level value in a savevm image (bsc#964644).
- CVE-2013-4534: Buffer overflow in hw/intc/openpic.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via vectors related to IRQDest elements (bsc#964452).
- CVE-2013-4537: The ssi_sd_transfer function in hw/sd/ssi-sd.c allowed remote attackers to execute arbitrary code via a crafted arglen value in a savevm image (bsc#962642).
- CVE-2013-4538: Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c allowed remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted (1) cmd_len, (2) row, or (3) col values; (4) row_start and row_end values; or (5) col_star and col_end values in a savevm image (bsc#962335).
- CVE-2013-4539: Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c might have allowed remote attackers to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image (bsc#962758).
- CVE-2014-0222: Integer overflow in the qcow_open function in block/qcow.c allowed remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image (bsc#964925).
- CVE-2014-3640: The sosendto function in slirp/udp.c allowed local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket (bsc#965112).
- CVE-2014-3689: The vmware-vga driver (hw/display/vmware_vga.c) allowed local guest users to write to qemu memory locations and gain privileges via unspecified parameters related to rectangle handling (bsc#962611).
- CVE-2014-7815: The set_pixel_format function in ui/vnc.c allowed remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value (bsc#962627).
- CVE-2014-9718: The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality had multiple interpretations of a function's return value, which allowed guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and system crash) via a PRDT with zero complete sectors, related to the bmdma_prepare_buf and ahci_dma_prepare_buf functions (bsc#964431).
- CVE-2015-1779: The VNC websocket frame decoder allowed remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section (bsc#962632).
- CVE-2015-5278: Infinite loop in ne2000_receive() function (bsc#964947).
- CVE-2015-6855: hw/ide/core.c did not properly restrict the commands accepted by an ATAPI device, which allowed guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash (bsc#965156).
- CVE-2015-7512: Buffer overflow in the pcnet_receive function in hw/net/pcnet.c, when a guest NIC has a larger MTU, allowed remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet (bsc#962360).
- CVE-2015-7549: pci: NULL pointer dereference issue (bsc#958918).
- CVE-2015-8345: eepro100: infinite loop in processing command block list (bsc#956832).
- CVE-2015-8504: VNC: floating point exception (bsc#958493).
- CVE-2015-8550: Paravirtualized drivers were incautious about shared memory contents (XSA-155) (bsc#957988).
- CVE-2015-8554: qemu-dm buffer overrun in MSI-X handling (XSA-164) (bsc#958007).
- CVE-2015-8555: Information leak in legacy x86 FPU/XMM initialization (XSA-165) (bsc#958009).
- CVE-2015-8558: Infinite loop in ehci_advance_state resulted in DoS (bsc#959006).
- CVE-2015-8567: vmxnet3: host memory leakage (bsc#959387).
- CVE-2015-8568: vmxnet3: host memory leakage (bsc#959387).
- CVE-2015-8613: SCSI: stack based buffer overflow in megasas_ctrl_get_info (bsc#961358).
- CVE-2015-8619: Stack based OOB write in hmp_sendkey routine (bsc#965269).
- CVE-2015-8743: ne2000: OOB memory access in ioport r/w functions (bsc#960726).
- CVE-2015-8744: vmxnet3: Incorrect l2 header validation lead to a crash via assert(2) call (bsc#960836).
- CVE-2015-8745: Reading IMR registers lead to a crash via assert(2) call (bsc#960707).
- CVE-2015-8817: OOB access in address_space_rw lead to segmentation fault (I) (bsc#969125).
- CVE-2015-8818: OOB access in address_space_rw lead to segmentation fault (II) (bsc#969126).
- CVE-2016-1568: AHCI use-after-free vulnerability in aio port commands (bsc#961332).
- CVE-2016-1570: The PV superpage functionality in arch/x86/mm.c allowed local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page identifier (MFN) to the (1) MMUEXT_MARK_SUPER or (2) MMUEXT_UNMARK_SUPER sub-op in the HYPERVISOR_mmuext_op hypercall or (3) unknown vectors related to page table updates (bsc#960861).
- CVE-2016-1571: VMX: intercept issue with INVLPG on non-canonical address (XSA-168) (bsc#960862).
- CVE-2016-1714: nvram: OOB r/w access in processing firmware configurations (bsc#961692).
- CVE-2016-1922: NULL pointer dereference in vapic_write() (bsc#962321).
- CVE-2016-1981: e1000 infinite loop in start_xmit and e1000_receive_iov routines (bsc#963783).
- CVE-2016-2198: EHCI NULL pointer dereference in ehci_caps_write (bsc#964415).
- CVE-2016-2270: Xen allowed local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings (bsc#965315).
- CVE-2016-2271: VMX when using an Intel or Cyrix CPU, allowed local HVM guest users to cause a denial of service (guest crash) via vectors related to a non-canonical RIP (bsc#965317).
- CVE-2016-2391: usb: multiple eof_timers in ohci module lead to NULL pointer dereference (bsc#967101).
- CVE-2016-2392: NULL pointer dereference in remote NDIS control message handling (bsc#967090).
- CVE-2016-2538: Integer overflow in remote NDIS control message handling (bsc#968004).
- XSA-166: ioreq handling possibly susceptible to multiple read issue (bsc#958523).
These non-security issues were fixed:
- bsc#954872: script block-dmmd not working as expected
- bsc#963923: domain weights not honored when sched-credit tslice is reduced
- bsc#959695: Missing docs for xen
Patchnames
SUSE-SLE-DESKTOP-12-2016-779,SUSE-SLE-SDK-12-2016-779,SUSE-SLE-SERVER-12-2016-779
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for xen",
"title": "Title of the patch"
},
{
"category": "description",
"text": "xen was updated to fix 46 security issues.\n\nThese security issues were fixed:\n- CVE-2013-4527: Buffer overflow in hw/timer/hpet.c might have allowed remote attackers to execute arbitrary code via vectors related to the number of timers (bsc#964746).\n- CVE-2013-4529: Buffer overflow in hw/pci/pcie_aer.c allowed remote attackers to cause a denial of service and possibly execute arbitrary code via a large log_num value in a savevm image (bsc#964929).\n- CVE-2013-4530: Buffer overflow in hw/ssi/pl022.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via crafted tx_fifo_head and rx_fifo_head values in a savevm image (bsc#964950).\n- CVE-2013-4533: Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s-\u003erx_level value in a savevm image (bsc#964644).\n- CVE-2013-4534: Buffer overflow in hw/intc/openpic.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via vectors related to IRQDest elements (bsc#964452).\n- CVE-2013-4537: The ssi_sd_transfer function in hw/sd/ssi-sd.c allowed remote attackers to execute arbitrary code via a crafted arglen value in a savevm image (bsc#962642).\n- CVE-2013-4538: Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c allowed remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted (1) cmd_len, (2) row, or (3) col values; (4) row_start and row_end values; or (5) col_star and col_end values in a savevm image (bsc#962335).\n- CVE-2013-4539: Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c might have allowed remote attackers to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image (bsc#962758).\n- CVE-2014-0222: Integer overflow in the qcow_open function in block/qcow.c allowed remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image (bsc#964925).\n- CVE-2014-3640: The sosendto function in slirp/udp.c allowed local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket (bsc#965112).\n- CVE-2014-3689: The vmware-vga driver (hw/display/vmware_vga.c) allowed local guest users to write to qemu memory locations and gain privileges via unspecified parameters related to rectangle handling (bsc#962611).\n- CVE-2014-7815: The set_pixel_format function in ui/vnc.c allowed remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value (bsc#962627).\n- CVE-2014-9718: The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality had multiple interpretations of a function\u0027s return value, which allowed guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and system crash) via a PRDT with zero complete sectors, related to the bmdma_prepare_buf and ahci_dma_prepare_buf functions (bsc#964431).\n- CVE-2015-1779: The VNC websocket frame decoder allowed remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section (bsc#962632).\n- CVE-2015-5278: Infinite loop in ne2000_receive() function (bsc#964947).\n- CVE-2015-6855: hw/ide/core.c did not properly restrict the commands accepted by an ATAPI device, which allowed guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash (bsc#965156).\n- CVE-2015-7512: Buffer overflow in the pcnet_receive function in hw/net/pcnet.c, when a guest NIC has a larger MTU, allowed remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet (bsc#962360).\n- CVE-2015-7549: pci: NULL pointer dereference issue (bsc#958918).\n- CVE-2015-8345: eepro100: infinite loop in processing command block list (bsc#956832).\n- CVE-2015-8504: VNC: floating point exception (bsc#958493).\n- CVE-2015-8550: Paravirtualized drivers were incautious about shared memory contents (XSA-155) (bsc#957988).\n- CVE-2015-8554: qemu-dm buffer overrun in MSI-X handling (XSA-164) (bsc#958007).\n- CVE-2015-8555: Information leak in legacy x86 FPU/XMM initialization (XSA-165) (bsc#958009).\n- CVE-2015-8558: Infinite loop in ehci_advance_state resulted in DoS (bsc#959006).\n- CVE-2015-8567: vmxnet3: host memory leakage (bsc#959387).\n- CVE-2015-8568: vmxnet3: host memory leakage (bsc#959387).\n- CVE-2015-8613: SCSI: stack based buffer overflow in megasas_ctrl_get_info (bsc#961358).\n- CVE-2015-8619: Stack based OOB write in hmp_sendkey routine (bsc#965269).\n- CVE-2015-8743: ne2000: OOB memory access in ioport r/w functions (bsc#960726).\n- CVE-2015-8744: vmxnet3: Incorrect l2 header validation lead to a crash via assert(2) call (bsc#960836).\n- CVE-2015-8745: Reading IMR registers lead to a crash via assert(2) call (bsc#960707).\n- CVE-2015-8817: OOB access in address_space_rw lead to segmentation fault (I) (bsc#969125).\n- CVE-2015-8818: OOB access in address_space_rw lead to segmentation fault (II) (bsc#969126).\n- CVE-2016-1568: AHCI use-after-free vulnerability in aio port commands (bsc#961332).\n- CVE-2016-1570: The PV superpage functionality in arch/x86/mm.c allowed local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page identifier (MFN) to the (1) MMUEXT_MARK_SUPER or (2) MMUEXT_UNMARK_SUPER sub-op in the HYPERVISOR_mmuext_op hypercall or (3) unknown vectors related to page table updates (bsc#960861).\n- CVE-2016-1571: VMX: intercept issue with INVLPG on non-canonical address (XSA-168) (bsc#960862).\n- CVE-2016-1714: nvram: OOB r/w access in processing firmware configurations (bsc#961692).\n- CVE-2016-1922: NULL pointer dereference in vapic_write() (bsc#962321).\n- CVE-2016-1981: e1000 infinite loop in start_xmit and e1000_receive_iov routines (bsc#963783).\n- CVE-2016-2198: EHCI NULL pointer dereference in ehci_caps_write (bsc#964415).\n- CVE-2016-2270: Xen allowed local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings (bsc#965315).\n- CVE-2016-2271: VMX when using an Intel or Cyrix CPU, allowed local HVM guest users to cause a denial of service (guest crash) via vectors related to a non-canonical RIP (bsc#965317).\n- CVE-2016-2391: usb: multiple eof_timers in ohci module lead to NULL pointer dereference (bsc#967101).\n- CVE-2016-2392: NULL pointer dereference in remote NDIS control message handling (bsc#967090).\n- CVE-2016-2538: Integer overflow in remote NDIS control message handling (bsc#968004).\n- XSA-166: ioreq handling possibly susceptible to multiple read issue (bsc#958523).\n\nThese non-security issues were fixed:\n- bsc#954872: script block-dmmd not working as expected \n- bsc#963923: domain weights not honored when sched-credit tslice is reduced\n- bsc#959695: Missing docs for xen\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-DESKTOP-12-2016-779,SUSE-SLE-SDK-12-2016-779,SUSE-SLE-SERVER-12-2016-779",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_1318-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2016:1318-1",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20161318-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2016:1318-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2016-May/002065.html"
},
{
"category": "self",
"summary": "SUSE Bug 954872",
"url": "https://bugzilla.suse.com/954872"
},
{
"category": "self",
"summary": "SUSE Bug 956832",
"url": "https://bugzilla.suse.com/956832"
},
{
"category": "self",
"summary": "SUSE Bug 957988",
"url": "https://bugzilla.suse.com/957988"
},
{
"category": "self",
"summary": "SUSE Bug 958007",
"url": "https://bugzilla.suse.com/958007"
},
{
"category": "self",
"summary": "SUSE Bug 958009",
"url": "https://bugzilla.suse.com/958009"
},
{
"category": "self",
"summary": "SUSE Bug 958493",
"url": "https://bugzilla.suse.com/958493"
},
{
"category": "self",
"summary": "SUSE Bug 958523",
"url": "https://bugzilla.suse.com/958523"
},
{
"category": "self",
"summary": "SUSE Bug 958918",
"url": "https://bugzilla.suse.com/958918"
},
{
"category": "self",
"summary": "SUSE Bug 959006",
"url": "https://bugzilla.suse.com/959006"
},
{
"category": "self",
"summary": "SUSE Bug 959387",
"url": "https://bugzilla.suse.com/959387"
},
{
"category": "self",
"summary": "SUSE Bug 959695",
"url": "https://bugzilla.suse.com/959695"
},
{
"category": "self",
"summary": "SUSE Bug 960707",
"url": "https://bugzilla.suse.com/960707"
},
{
"category": "self",
"summary": "SUSE Bug 960726",
"url": "https://bugzilla.suse.com/960726"
},
{
"category": "self",
"summary": "SUSE Bug 960836",
"url": "https://bugzilla.suse.com/960836"
},
{
"category": "self",
"summary": "SUSE Bug 960861",
"url": "https://bugzilla.suse.com/960861"
},
{
"category": "self",
"summary": "SUSE Bug 960862",
"url": "https://bugzilla.suse.com/960862"
},
{
"category": "self",
"summary": "SUSE Bug 961332",
"url": "https://bugzilla.suse.com/961332"
},
{
"category": "self",
"summary": "SUSE Bug 961358",
"url": "https://bugzilla.suse.com/961358"
},
{
"category": "self",
"summary": "SUSE Bug 961692",
"url": "https://bugzilla.suse.com/961692"
},
{
"category": "self",
"summary": "SUSE Bug 962321",
"url": "https://bugzilla.suse.com/962321"
},
{
"category": "self",
"summary": "SUSE Bug 962335",
"url": "https://bugzilla.suse.com/962335"
},
{
"category": "self",
"summary": "SUSE Bug 962360",
"url": "https://bugzilla.suse.com/962360"
},
{
"category": "self",
"summary": "SUSE Bug 962611",
"url": "https://bugzilla.suse.com/962611"
},
{
"category": "self",
"summary": "SUSE Bug 962627",
"url": "https://bugzilla.suse.com/962627"
},
{
"category": "self",
"summary": "SUSE Bug 962632",
"url": "https://bugzilla.suse.com/962632"
},
{
"category": "self",
"summary": "SUSE Bug 962642",
"url": "https://bugzilla.suse.com/962642"
},
{
"category": "self",
"summary": "SUSE Bug 962758",
"url": "https://bugzilla.suse.com/962758"
},
{
"category": "self",
"summary": "SUSE Bug 963783",
"url": "https://bugzilla.suse.com/963783"
},
{
"category": "self",
"summary": "SUSE Bug 963923",
"url": "https://bugzilla.suse.com/963923"
},
{
"category": "self",
"summary": "SUSE Bug 964415",
"url": "https://bugzilla.suse.com/964415"
},
{
"category": "self",
"summary": "SUSE Bug 964431",
"url": "https://bugzilla.suse.com/964431"
},
{
"category": "self",
"summary": "SUSE Bug 964452",
"url": "https://bugzilla.suse.com/964452"
},
{
"category": "self",
"summary": "SUSE Bug 964644",
"url": "https://bugzilla.suse.com/964644"
},
{
"category": "self",
"summary": "SUSE Bug 964746",
"url": "https://bugzilla.suse.com/964746"
},
{
"category": "self",
"summary": "SUSE Bug 964925",
"url": "https://bugzilla.suse.com/964925"
},
{
"category": "self",
"summary": "SUSE Bug 964929",
"url": "https://bugzilla.suse.com/964929"
},
{
"category": "self",
"summary": "SUSE Bug 964947",
"url": "https://bugzilla.suse.com/964947"
},
{
"category": "self",
"summary": "SUSE Bug 964950",
"url": "https://bugzilla.suse.com/964950"
},
{
"category": "self",
"summary": "SUSE Bug 965112",
"url": "https://bugzilla.suse.com/965112"
},
{
"category": "self",
"summary": "SUSE Bug 965156",
"url": "https://bugzilla.suse.com/965156"
},
{
"category": "self",
"summary": "SUSE Bug 965269",
"url": "https://bugzilla.suse.com/965269"
},
{
"category": "self",
"summary": "SUSE Bug 965315",
"url": "https://bugzilla.suse.com/965315"
},
{
"category": "self",
"summary": "SUSE Bug 965317",
"url": "https://bugzilla.suse.com/965317"
},
{
"category": "self",
"summary": "SUSE Bug 967090",
"url": "https://bugzilla.suse.com/967090"
},
{
"category": "self",
"summary": "SUSE Bug 967101",
"url": "https://bugzilla.suse.com/967101"
},
{
"category": "self",
"summary": "SUSE Bug 968004",
"url": "https://bugzilla.suse.com/968004"
},
{
"category": "self",
"summary": "SUSE Bug 969125",
"url": "https://bugzilla.suse.com/969125"
},
{
"category": "self",
"summary": "SUSE Bug 969126",
"url": "https://bugzilla.suse.com/969126"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4527 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4527/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4529 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4529/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4530 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4530/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4533 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4533/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4534 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4534/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4537 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4537/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4538 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4538/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2013-4539 page",
"url": "https://www.suse.com/security/cve/CVE-2013-4539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-0222 page",
"url": "https://www.suse.com/security/cve/CVE-2014-0222/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3640 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3640/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3689 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3689/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-7815 page",
"url": "https://www.suse.com/security/cve/CVE-2014-7815/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-9718 page",
"url": "https://www.suse.com/security/cve/CVE-2014-9718/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-1779 page",
"url": "https://www.suse.com/security/cve/CVE-2015-1779/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5278 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5278/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-6855 page",
"url": "https://www.suse.com/security/cve/CVE-2015-6855/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7512 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7512/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7549 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7549/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8345 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8345/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8504 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8504/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8550 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8550/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8554 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8554/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8555 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8555/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8558 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8558/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8567 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8567/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8568 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8568/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8613 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8613/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8619 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8619/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8743 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8743/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8744 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8744/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8745 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8817 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8818 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1568 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1568/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1570 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1570/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1571 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1571/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1714 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1714/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1922 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1922/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1981 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1981/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2198 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2198/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2270 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2270/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2271 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2271/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2391 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2391/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2392 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2392/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2538 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2538/"
}
],
"title": "Security update for xen",
"tracking": {
"current_release_date": "2016-05-17T12:09:35Z",
"generator": {
"date": "2016-05-17T12:09:35Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2016:1318-1",
"initial_release_date": "2016-05-17T12:09:35Z",
"revision_history": [
{
"date": "2016-05-17T12:09:35Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "xen-4.4.4_02-22.19.1.x86_64",
"product": {
"name": "xen-4.4.4_02-22.19.1.x86_64",
"product_id": "xen-4.4.4_02-22.19.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"product": {
"name": "xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"product_id": "xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-libs-4.4.4_02-22.19.1.x86_64",
"product": {
"name": "xen-libs-4.4.4_02-22.19.1.x86_64",
"product_id": "xen-libs-4.4.4_02-22.19.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"product": {
"name": "xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"product_id": "xen-libs-32bit-4.4.4_02-22.19.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-devel-4.4.4_02-22.19.1.x86_64",
"product": {
"name": "xen-devel-4.4.4_02-22.19.1.x86_64",
"product_id": "xen-devel-4.4.4_02-22.19.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-doc-html-4.4.4_02-22.19.1.x86_64",
"product": {
"name": "xen-doc-html-4.4.4_02-22.19.1.x86_64",
"product_id": "xen-doc-html-4.4.4_02-22.19.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-tools-4.4.4_02-22.19.1.x86_64",
"product": {
"name": "xen-tools-4.4.4_02-22.19.1.x86_64",
"product_id": "xen-tools-4.4.4_02-22.19.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"product": {
"name": "xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"product_id": "xen-tools-domU-4.4.4_02-22.19.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12",
"product": {
"name": "SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Software Development Kit 12",
"product": {
"name": "SUSE Linux Enterprise Software Development Kit 12",
"product_id": "SUSE Linux Enterprise Software Development Kit 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-sdk:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12",
"product": {
"name": "SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-4.4.4_02-22.19.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64"
},
"product_reference": "xen-4.4.4_02-22.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64"
},
"product_reference": "xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-4.4.4_02-22.19.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64"
},
"product_reference": "xen-libs-4.4.4_02-22.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-32bit-4.4.4_02-22.19.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64"
},
"product_reference": "xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-4.4.4_02-22.19.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12",
"product_id": "SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
},
"product_reference": "xen-devel-4.4.4_02-22.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-4.4.4_02-22.19.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64"
},
"product_reference": "xen-4.4.4_02-22.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-doc-html-4.4.4_02-22.19.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64"
},
"product_reference": "xen-doc-html-4.4.4_02-22.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64"
},
"product_reference": "xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-4.4.4_02-22.19.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64"
},
"product_reference": "xen-libs-4.4.4_02-22.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-32bit-4.4.4_02-22.19.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64"
},
"product_reference": "xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-4.4.4_02-22.19.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64"
},
"product_reference": "xen-tools-4.4.4_02-22.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-domU-4.4.4_02-22.19.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64"
},
"product_reference": "xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-4.4.4_02-22.19.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64"
},
"product_reference": "xen-4.4.4_02-22.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-doc-html-4.4.4_02-22.19.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64"
},
"product_reference": "xen-doc-html-4.4.4_02-22.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64"
},
"product_reference": "xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-4.4.4_02-22.19.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64"
},
"product_reference": "xen-libs-4.4.4_02-22.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-32bit-4.4.4_02-22.19.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64"
},
"product_reference": "xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-4.4.4_02-22.19.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64"
},
"product_reference": "xen-tools-4.4.4_02-22.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-domU-4.4.4_02-22.19.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64"
},
"product_reference": "xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2013-4527",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4527"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in hw/timer/hpet.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via vectors related to the number of timers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4527",
"url": "https://www.suse.com/security/cve/CVE-2013-4527"
},
{
"category": "external",
"summary": "SUSE Bug 864673 for CVE-2013-4527",
"url": "https://bugzilla.suse.com/864673"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4527",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 964746 for CVE-2013-4527",
"url": "https://bugzilla.suse.com/964746"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "moderate"
}
],
"title": "CVE-2013-4527"
},
{
"cve": "CVE-2013-4529",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4529"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in hw/pci/pcie_aer.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large log_num value in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4529",
"url": "https://www.suse.com/security/cve/CVE-2013-4529"
},
{
"category": "external",
"summary": "SUSE Bug 864678 for CVE-2013-4529",
"url": "https://bugzilla.suse.com/864678"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4529",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 964929 for CVE-2013-4529",
"url": "https://bugzilla.suse.com/964929"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "moderate"
}
],
"title": "CVE-2013-4529"
},
{
"cve": "CVE-2013-4530",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4530"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in hw/ssi/pl022.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via crafted tx_fifo_head and rx_fifo_head values in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4530",
"url": "https://www.suse.com/security/cve/CVE-2013-4530"
},
{
"category": "external",
"summary": "SUSE Bug 1072198 for CVE-2013-4530",
"url": "https://bugzilla.suse.com/1072198"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2013-4530",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 1072228 for CVE-2013-4530",
"url": "https://bugzilla.suse.com/1072228"
},
{
"category": "external",
"summary": "SUSE Bug 864682 for CVE-2013-4530",
"url": "https://bugzilla.suse.com/864682"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4530",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 964950 for CVE-2013-4530",
"url": "https://bugzilla.suse.com/964950"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "important"
}
],
"title": "CVE-2013-4530"
},
{
"cve": "CVE-2013-4533",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4533"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s-\u003erx_level value in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4533",
"url": "https://www.suse.com/security/cve/CVE-2013-4533"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2013-4533",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 864655 for CVE-2013-4533",
"url": "https://bugzilla.suse.com/864655"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4533",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 964644 for CVE-2013-4533",
"url": "https://bugzilla.suse.com/964644"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "important"
}
],
"title": "CVE-2013-4533"
},
{
"cve": "CVE-2013-4534",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4534"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in hw/intc/openpic.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via vectors related to IRQDest elements.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4534",
"url": "https://www.suse.com/security/cve/CVE-2013-4534"
},
{
"category": "external",
"summary": "SUSE Bug 864811 for CVE-2013-4534",
"url": "https://bugzilla.suse.com/864811"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4534",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 964452 for CVE-2013-4534",
"url": "https://bugzilla.suse.com/964452"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "important"
}
],
"title": "CVE-2013-4534"
},
{
"cve": "CVE-2013-4537",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4537"
}
],
"notes": [
{
"category": "general",
"text": "The ssi_sd_transfer function in hw/sd/ssi-sd.c in QEMU before 1.7.2 allows remote attackers to execute arbitrary code via a crafted arglen value in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4537",
"url": "https://www.suse.com/security/cve/CVE-2013-4537"
},
{
"category": "external",
"summary": "SUSE Bug 864391 for CVE-2013-4537",
"url": "https://bugzilla.suse.com/864391"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4537",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 962642 for CVE-2013-4537",
"url": "https://bugzilla.suse.com/962642"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "important"
}
],
"title": "CVE-2013-4537"
},
{
"cve": "CVE-2013-4538",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4538"
}
],
"notes": [
{
"category": "general",
"text": "Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c in QEMU before 1.7.2 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted (1) cmd_len, (2) row, or (3) col values; (4) row_start and row_end values; or (5) col_star and col_end values in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4538",
"url": "https://www.suse.com/security/cve/CVE-2013-4538"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2013-4538",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 864769 for CVE-2013-4538",
"url": "https://bugzilla.suse.com/864769"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4538",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 962335 for CVE-2013-4538",
"url": "https://bugzilla.suse.com/962335"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "important"
}
],
"title": "CVE-2013-4538"
},
{
"cve": "CVE-2013-4539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2013-4539"
}
],
"notes": [
{
"category": "general",
"text": "Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c in QEMU before 1.7.2 might allow remote attackers to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2013-4539",
"url": "https://www.suse.com/security/cve/CVE-2013-4539"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2013-4539",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 864805 for CVE-2013-4539",
"url": "https://bugzilla.suse.com/864805"
},
{
"category": "external",
"summary": "SUSE Bug 871442 for CVE-2013-4539",
"url": "https://bugzilla.suse.com/871442"
},
{
"category": "external",
"summary": "SUSE Bug 962758 for CVE-2013-4539",
"url": "https://bugzilla.suse.com/962758"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "important"
}
],
"title": "CVE-2013-4539"
},
{
"cve": "CVE-2014-0222",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-0222"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-0222",
"url": "https://www.suse.com/security/cve/CVE-2014-0222"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2014-0222",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 877642 for CVE-2014-0222",
"url": "https://bugzilla.suse.com/877642"
},
{
"category": "external",
"summary": "SUSE Bug 950367 for CVE-2014-0222",
"url": "https://bugzilla.suse.com/950367"
},
{
"category": "external",
"summary": "SUSE Bug 964925 for CVE-2014-0222",
"url": "https://bugzilla.suse.com/964925"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "moderate"
}
],
"title": "CVE-2014-0222"
},
{
"cve": "CVE-2014-3640",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3640"
}
],
"notes": [
{
"category": "general",
"text": "The sosendto function in slirp/udp.c in QEMU before 2.1.2 allows local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3640",
"url": "https://www.suse.com/security/cve/CVE-2014-3640"
},
{
"category": "external",
"summary": "SUSE Bug 897654 for CVE-2014-3640",
"url": "https://bugzilla.suse.com/897654"
},
{
"category": "external",
"summary": "SUSE Bug 965112 for CVE-2014-3640",
"url": "https://bugzilla.suse.com/965112"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "important"
}
],
"title": "CVE-2014-3640"
},
{
"cve": "CVE-2014-3689",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3689"
}
],
"notes": [
{
"category": "general",
"text": "The vmware-vga driver (hw/display/vmware_vga.c) in QEMU allows local guest users to write to qemu memory locations and gain privileges via unspecified parameters related to rectangle handling.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3689",
"url": "https://www.suse.com/security/cve/CVE-2014-3689"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2014-3689",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 1189862 for CVE-2014-3689",
"url": "https://bugzilla.suse.com/1189862"
},
{
"category": "external",
"summary": "SUSE Bug 901508 for CVE-2014-3689",
"url": "https://bugzilla.suse.com/901508"
},
{
"category": "external",
"summary": "SUSE Bug 962611 for CVE-2014-3689",
"url": "https://bugzilla.suse.com/962611"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "important"
}
],
"title": "CVE-2014-3689"
},
{
"cve": "CVE-2014-7815",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-7815"
}
],
"notes": [
{
"category": "general",
"text": "The set_pixel_format function in ui/vnc.c in QEMU allows remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-7815",
"url": "https://www.suse.com/security/cve/CVE-2014-7815"
},
{
"category": "external",
"summary": "SUSE Bug 902737 for CVE-2014-7815",
"url": "https://bugzilla.suse.com/902737"
},
{
"category": "external",
"summary": "SUSE Bug 962627 for CVE-2014-7815",
"url": "https://bugzilla.suse.com/962627"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "moderate"
}
],
"title": "CVE-2014-7815"
},
{
"cve": "CVE-2014-9718",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-9718"
}
],
"notes": [
{
"category": "general",
"text": "The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality in QEMU 1.0 through 2.1.3 have multiple interpretations of a function\u0027s return value, which allows guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and system crash) via a PRDT with zero complete sectors, related to the bmdma_prepare_buf and ahci_dma_prepare_buf functions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-9718",
"url": "https://www.suse.com/security/cve/CVE-2014-9718"
},
{
"category": "external",
"summary": "SUSE Bug 928393 for CVE-2014-9718",
"url": "https://bugzilla.suse.com/928393"
},
{
"category": "external",
"summary": "SUSE Bug 964431 for CVE-2014-9718",
"url": "https://bugzilla.suse.com/964431"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "moderate"
}
],
"title": "CVE-2014-9718"
},
{
"cve": "CVE-2015-1779",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-1779"
}
],
"notes": [
{
"category": "general",
"text": "The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-1779",
"url": "https://www.suse.com/security/cve/CVE-2015-1779"
},
{
"category": "external",
"summary": "SUSE Bug 924018 for CVE-2015-1779",
"url": "https://bugzilla.suse.com/924018"
},
{
"category": "external",
"summary": "SUSE Bug 962632 for CVE-2015-1779",
"url": "https://bugzilla.suse.com/962632"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "moderate"
}
],
"title": "CVE-2015-1779"
},
{
"cve": "CVE-2015-5278",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5278"
}
],
"notes": [
{
"category": "general",
"text": "The ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service (infinite loop and instance crash) or possibly execute arbitrary code via vectors related to receiving packets.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5278",
"url": "https://www.suse.com/security/cve/CVE-2015-5278"
},
{
"category": "external",
"summary": "SUSE Bug 945989 for CVE-2015-5278",
"url": "https://bugzilla.suse.com/945989"
},
{
"category": "external",
"summary": "SUSE Bug 964947 for CVE-2015-5278",
"url": "https://bugzilla.suse.com/964947"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "moderate"
}
],
"title": "CVE-2015-5278"
},
{
"cve": "CVE-2015-6855",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-6855"
}
],
"notes": [
{
"category": "general",
"text": "hw/ide/core.c in QEMU does not properly restrict the commands accepted by an ATAPI device, which allows guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-6855",
"url": "https://www.suse.com/security/cve/CVE-2015-6855"
},
{
"category": "external",
"summary": "SUSE Bug 945404 for CVE-2015-6855",
"url": "https://bugzilla.suse.com/945404"
},
{
"category": "external",
"summary": "SUSE Bug 965156 for CVE-2015-6855",
"url": "https://bugzilla.suse.com/965156"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "important"
}
],
"title": "CVE-2015-6855"
},
{
"cve": "CVE-2015-7512",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7512"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU, when a guest NIC has a larger MTU, allows remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7512",
"url": "https://www.suse.com/security/cve/CVE-2015-7512"
},
{
"category": "external",
"summary": "SUSE Bug 957162 for CVE-2015-7512",
"url": "https://bugzilla.suse.com/957162"
},
{
"category": "external",
"summary": "SUSE Bug 962360 for CVE-2015-7512",
"url": "https://bugzilla.suse.com/962360"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "important"
}
],
"title": "CVE-2015-7512"
},
{
"cve": "CVE-2015-7549",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7549"
}
],
"notes": [
{
"category": "general",
"text": "The MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by leveraging failure to define the .write method.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7549",
"url": "https://www.suse.com/security/cve/CVE-2015-7549"
},
{
"category": "external",
"summary": "SUSE Bug 958917 for CVE-2015-7549",
"url": "https://bugzilla.suse.com/958917"
},
{
"category": "external",
"summary": "SUSE Bug 958918 for CVE-2015-7549",
"url": "https://bugzilla.suse.com/958918"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "low"
}
],
"title": "CVE-2015-7549"
},
{
"cve": "CVE-2015-8345",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8345"
}
],
"notes": [
{
"category": "general",
"text": "The eepro100 emulator in QEMU qemu-kvm blank allows local guest users to cause a denial of service (application crash and infinite loop) via vectors involving the command block list.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8345",
"url": "https://www.suse.com/security/cve/CVE-2015-8345"
},
{
"category": "external",
"summary": "SUSE Bug 956829 for CVE-2015-8345",
"url": "https://bugzilla.suse.com/956829"
},
{
"category": "external",
"summary": "SUSE Bug 956832 for CVE-2015-8345",
"url": "https://bugzilla.suse.com/956832"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "moderate"
}
],
"title": "CVE-2015-8345"
},
{
"cve": "CVE-2015-8504",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8504"
}
],
"notes": [
{
"category": "general",
"text": "Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service (arithmetic exception and application crash) via crafted SetPixelFormat messages from a client.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8504",
"url": "https://www.suse.com/security/cve/CVE-2015-8504"
},
{
"category": "external",
"summary": "SUSE Bug 958491 for CVE-2015-8504",
"url": "https://bugzilla.suse.com/958491"
},
{
"category": "external",
"summary": "SUSE Bug 958493 for CVE-2015-8504",
"url": "https://bugzilla.suse.com/958493"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "moderate"
}
],
"title": "CVE-2015-8504"
},
{
"cve": "CVE-2015-8550",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8550"
}
],
"notes": [
{
"category": "general",
"text": "Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (host OS crash) or gain privileges by writing to memory shared between the frontend and backend, aka a double fetch vulnerability.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8550",
"url": "https://www.suse.com/security/cve/CVE-2015-8550"
},
{
"category": "external",
"summary": "SUSE Bug 1020452 for CVE-2015-8550",
"url": "https://bugzilla.suse.com/1020452"
},
{
"category": "external",
"summary": "SUSE Bug 1052256 for CVE-2015-8550",
"url": "https://bugzilla.suse.com/1052256"
},
{
"category": "external",
"summary": "SUSE Bug 957988 for CVE-2015-8550",
"url": "https://bugzilla.suse.com/957988"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "important"
}
],
"title": "CVE-2015-8550"
},
{
"cve": "CVE-2015-8554",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8554"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional (aka qemu-dm) device model, allows local x86 HVM guest administrators to gain privileges by leveraging a system with access to a passed-through MSI-X capable physical PCI device and MSI-X table entries, related to a \"write path.\"",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8554",
"url": "https://www.suse.com/security/cve/CVE-2015-8554"
},
{
"category": "external",
"summary": "SUSE Bug 958007 for CVE-2015-8554",
"url": "https://bugzilla.suse.com/958007"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "important"
}
],
"title": "CVE-2015-8554"
},
{
"cve": "CVE-2015-8555",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8555"
}
],
"notes": [
{
"category": "general",
"text": "Xen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize x86 FPU stack and XMM registers when XSAVE/XRSTOR are not used to manage guest extended register state, which allows local guest domains to obtain sensitive information from other domains via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8555",
"url": "https://www.suse.com/security/cve/CVE-2015-8555"
},
{
"category": "external",
"summary": "SUSE Bug 958009 for CVE-2015-8555",
"url": "https://bugzilla.suse.com/958009"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "important"
}
],
"title": "CVE-2015-8555"
},
{
"cve": "CVE-2015-8558",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8558"
}
],
"notes": [
{
"category": "general",
"text": "The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular isochronous transfer descriptor (iTD) list.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8558",
"url": "https://www.suse.com/security/cve/CVE-2015-8558"
},
{
"category": "external",
"summary": "SUSE Bug 959005 for CVE-2015-8558",
"url": "https://bugzilla.suse.com/959005"
},
{
"category": "external",
"summary": "SUSE Bug 959006 for CVE-2015-8558",
"url": "https://bugzilla.suse.com/959006"
},
{
"category": "external",
"summary": "SUSE Bug 976109 for CVE-2015-8558",
"url": "https://bugzilla.suse.com/976109"
},
{
"category": "external",
"summary": "SUSE Bug 976111 for CVE-2015-8558",
"url": "https://bugzilla.suse.com/976111"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "moderate"
}
],
"title": "CVE-2015-8558"
},
{
"cve": "CVE-2015-8567",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8567"
}
],
"notes": [
{
"category": "general",
"text": "Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8567",
"url": "https://www.suse.com/security/cve/CVE-2015-8567"
},
{
"category": "external",
"summary": "SUSE Bug 959386 for CVE-2015-8567",
"url": "https://bugzilla.suse.com/959386"
},
{
"category": "external",
"summary": "SUSE Bug 959387 for CVE-2015-8567",
"url": "https://bugzilla.suse.com/959387"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "low"
}
],
"title": "CVE-2015-8567"
},
{
"cve": "CVE-2015-8568",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8568"
}
],
"notes": [
{
"category": "general",
"text": "Memory leak in QEMU, when built with a VMWARE VMXNET3 paravirtual NIC emulator support, allows local guest users to cause a denial of service (host memory consumption) by trying to activate the vmxnet3 device repeatedly.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8568",
"url": "https://www.suse.com/security/cve/CVE-2015-8568"
},
{
"category": "external",
"summary": "SUSE Bug 959386 for CVE-2015-8568",
"url": "https://bugzilla.suse.com/959386"
},
{
"category": "external",
"summary": "SUSE Bug 959387 for CVE-2015-8568",
"url": "https://bugzilla.suse.com/959387"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "low"
}
],
"title": "CVE-2015-8568"
},
{
"cve": "CVE-2015-8613",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8613"
}
],
"notes": [
{
"category": "general",
"text": "Stack-based buffer overflow in the megasas_ctrl_get_info function in QEMU, when built with SCSI MegaRAID SAS HBA emulation support, allows local guest users to cause a denial of service (QEMU instance crash) via a crafted SCSI controller CTRL_GET_INFO command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8613",
"url": "https://www.suse.com/security/cve/CVE-2015-8613"
},
{
"category": "external",
"summary": "SUSE Bug 961358 for CVE-2015-8613",
"url": "https://bugzilla.suse.com/961358"
},
{
"category": "external",
"summary": "SUSE Bug 961556 for CVE-2015-8613",
"url": "https://bugzilla.suse.com/961556"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "moderate"
}
],
"title": "CVE-2015-8613"
},
{
"cve": "CVE-2015-8619",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8619"
}
],
"notes": [
{
"category": "general",
"text": "The Human Monitor Interface support in QEMU allows remote attackers to cause a denial of service (out-of-bounds write and application crash).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8619",
"url": "https://www.suse.com/security/cve/CVE-2015-8619"
},
{
"category": "external",
"summary": "SUSE Bug 960334 for CVE-2015-8619",
"url": "https://bugzilla.suse.com/960334"
},
{
"category": "external",
"summary": "SUSE Bug 965269 for CVE-2015-8619",
"url": "https://bugzilla.suse.com/965269"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "important"
}
],
"title": "CVE-2015-8619"
},
{
"cve": "CVE-2015-8743",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8743"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing \u0027ioport\u0027 r/w operations. A privileged (CAP_SYS_RAWIO) user/process could use this flaw to leak or corrupt QEMU memory bytes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8743",
"url": "https://www.suse.com/security/cve/CVE-2015-8743"
},
{
"category": "external",
"summary": "SUSE Bug 960725 for CVE-2015-8743",
"url": "https://bugzilla.suse.com/960725"
},
{
"category": "external",
"summary": "SUSE Bug 960726 for CVE-2015-8743",
"url": "https://bugzilla.suse.com/960726"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "moderate"
}
],
"title": "CVE-2015-8743"
},
{
"cve": "CVE-2015-8744",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8744"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It occurs when a guest sends a Layer-2 packet smaller than 22 bytes. A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8744",
"url": "https://www.suse.com/security/cve/CVE-2015-8744"
},
{
"category": "external",
"summary": "SUSE Bug 960835 for CVE-2015-8744",
"url": "https://bugzilla.suse.com/960835"
},
{
"category": "external",
"summary": "SUSE Bug 960836 for CVE-2015-8744",
"url": "https://bugzilla.suse.com/960836"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "low"
}
],
"title": "CVE-2015-8744"
},
{
"cve": "CVE-2015-8745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8745"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It could occur while reading Interrupt Mask Registers (IMR). A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8745",
"url": "https://www.suse.com/security/cve/CVE-2015-8745"
},
{
"category": "external",
"summary": "SUSE Bug 960707 for CVE-2015-8745",
"url": "https://bugzilla.suse.com/960707"
},
{
"category": "external",
"summary": "SUSE Bug 960708 for CVE-2015-8745",
"url": "https://bugzilla.suse.com/960708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "low"
}
],
"title": "CVE-2015-8745"
},
{
"cve": "CVE-2015-8817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8817"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built to use \u0027address_space_translate\u0027 to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pci_dma_read/write calls. Affects QEMU versions \u003e= 1.6.0 and \u003c= 2.3.1. A privileged user inside guest could use this flaw to crash the guest instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8817",
"url": "https://www.suse.com/security/cve/CVE-2015-8817"
},
{
"category": "external",
"summary": "SUSE Bug 969121 for CVE-2015-8817",
"url": "https://bugzilla.suse.com/969121"
},
{
"category": "external",
"summary": "SUSE Bug 969122 for CVE-2015-8817",
"url": "https://bugzilla.suse.com/969122"
},
{
"category": "external",
"summary": "SUSE Bug 969125 for CVE-2015-8817",
"url": "https://bugzilla.suse.com/969125"
},
{
"category": "external",
"summary": "SUSE Bug 969126 for CVE-2015-8817",
"url": "https://bugzilla.suse.com/969126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "moderate"
}
],
"title": "CVE-2015-8817"
},
{
"cve": "CVE-2015-8818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8818"
}
],
"notes": [
{
"category": "general",
"text": "The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8818",
"url": "https://www.suse.com/security/cve/CVE-2015-8818"
},
{
"category": "external",
"summary": "SUSE Bug 969122 for CVE-2015-8818",
"url": "https://bugzilla.suse.com/969122"
},
{
"category": "external",
"summary": "SUSE Bug 969125 for CVE-2015-8818",
"url": "https://bugzilla.suse.com/969125"
},
{
"category": "external",
"summary": "SUSE Bug 969126 for CVE-2015-8818",
"url": "https://bugzilla.suse.com/969126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "moderate"
}
],
"title": "CVE-2015-8818"
},
{
"cve": "CVE-2016-1568",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1568"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHCI Native Command Queuing (NCQ) AIO command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1568",
"url": "https://www.suse.com/security/cve/CVE-2016-1568"
},
{
"category": "external",
"summary": "SUSE Bug 961332 for CVE-2016-1568",
"url": "https://bugzilla.suse.com/961332"
},
{
"category": "external",
"summary": "SUSE Bug 961333 for CVE-2016-1568",
"url": "https://bugzilla.suse.com/961333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "moderate"
}
],
"title": "CVE-2016-1568"
},
{
"cve": "CVE-2016-1570",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1570"
}
],
"notes": [
{
"category": "general",
"text": "The PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x allows local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page identifier (MFN) to the (1) MMUEXT_MARK_SUPER or (2) MMUEXT_UNMARK_SUPER sub-op in the HYPERVISOR_mmuext_op hypercall or (3) unknown vectors related to page table updates.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1570",
"url": "https://www.suse.com/security/cve/CVE-2016-1570"
},
{
"category": "external",
"summary": "SUSE Bug 960861 for CVE-2016-1570",
"url": "https://bugzilla.suse.com/960861"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "important"
}
],
"title": "CVE-2016-1570"
},
{
"cve": "CVE-2016-1571",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1571"
}
],
"notes": [
{
"category": "general",
"text": "The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nested virtualization is enabled, allows local HVM guest users to cause a denial of service (host crash) via a non-canonical guest address in an INVVPID instruction, which triggers a hypervisor bug check.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1571",
"url": "https://www.suse.com/security/cve/CVE-2016-1571"
},
{
"category": "external",
"summary": "SUSE Bug 960861 for CVE-2016-1571",
"url": "https://bugzilla.suse.com/960861"
},
{
"category": "external",
"summary": "SUSE Bug 960862 for CVE-2016-1571",
"url": "https://bugzilla.suse.com/960862"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "moderate"
}
],
"title": "CVE-2016-1571"
},
{
"cve": "CVE-2016-1714",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1714"
}
],
"notes": [
{
"category": "general",
"text": "The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAP_SYS_RAWIO privilege to cause a denial of service (out-of-bounds read or write access and process crash) or possibly execute arbitrary code via an invalid current entry value in a firmware configuration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1714",
"url": "https://www.suse.com/security/cve/CVE-2016-1714"
},
{
"category": "external",
"summary": "SUSE Bug 961691 for CVE-2016-1714",
"url": "https://bugzilla.suse.com/961691"
},
{
"category": "external",
"summary": "SUSE Bug 961692 for CVE-2016-1714",
"url": "https://bugzilla.suse.com/961692"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "moderate"
}
],
"title": "CVE-2016-1714"
},
{
"cve": "CVE-2016-1922",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1922"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp interface. In that, \u0027current_cpu\u0027 remains null, which leads to the null pointer dereference. A user or process could use this flaw to crash the QEMU instance, resulting in DoS issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1922",
"url": "https://www.suse.com/security/cve/CVE-2016-1922"
},
{
"category": "external",
"summary": "SUSE Bug 962320 for CVE-2016-1922",
"url": "https://bugzilla.suse.com/962320"
},
{
"category": "external",
"summary": "SUSE Bug 962321 for CVE-2016-1922",
"url": "https://bugzilla.suse.com/962321"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "low"
}
],
"title": "CVE-2016-1922"
},
{
"cve": "CVE-2016-1981",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1981"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue. It could occur while processing data via transmit or receive descriptors, provided the initial receive/transmit descriptor head (TDH/RDH) is set outside the allocated descriptor buffer. A privileged user inside guest could use this flaw to crash the QEMU instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1981",
"url": "https://www.suse.com/security/cve/CVE-2016-1981"
},
{
"category": "external",
"summary": "SUSE Bug 963782 for CVE-2016-1981",
"url": "https://bugzilla.suse.com/963782"
},
{
"category": "external",
"summary": "SUSE Bug 963783 for CVE-2016-1981",
"url": "https://bugzilla.suse.com/963783"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "low"
}
],
"title": "CVE-2016-1981"
},
{
"cve": "CVE-2016-2198",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2198"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null pointer dereference flaw. It could occur when an application attempts to write to EHCI capabilities registers. A privileged user inside quest could use this flaw to crash the QEMU process instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2198",
"url": "https://www.suse.com/security/cve/CVE-2016-2198"
},
{
"category": "external",
"summary": "SUSE Bug 964413 for CVE-2016-2198",
"url": "https://bugzilla.suse.com/964413"
},
{
"category": "external",
"summary": "SUSE Bug 964415 for CVE-2016-2198",
"url": "https://bugzilla.suse.com/964415"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "low"
}
],
"title": "CVE-2016-2198"
},
{
"cve": "CVE-2016-2270",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2270"
}
],
"notes": [
{
"category": "general",
"text": "Xen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2270",
"url": "https://www.suse.com/security/cve/CVE-2016-2270"
},
{
"category": "external",
"summary": "SUSE Bug 965315 for CVE-2016-2270",
"url": "https://bugzilla.suse.com/965315"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.8,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "moderate"
}
],
"title": "CVE-2016-2270"
},
{
"cve": "CVE-2016-2271",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2271"
}
],
"notes": [
{
"category": "general",
"text": "VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to cause a denial of service (guest crash) via vectors related to a non-canonical RIP.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2271",
"url": "https://www.suse.com/security/cve/CVE-2016-2271"
},
{
"category": "external",
"summary": "SUSE Bug 965317 for CVE-2016-2271",
"url": "https://bugzilla.suse.com/965317"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "moderate"
}
],
"title": "CVE-2016-2271"
},
{
"cve": "CVE-2016-2391",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2391"
}
],
"notes": [
{
"category": "general",
"text": "The ohci_bus_start function in the USB OHCI emulation support (hw/usb/hcd-ohci.c) in QEMU allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors related to multiple eof_timers.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2391",
"url": "https://www.suse.com/security/cve/CVE-2016-2391"
},
{
"category": "external",
"summary": "SUSE Bug 967012 for CVE-2016-2391",
"url": "https://bugzilla.suse.com/967012"
},
{
"category": "external",
"summary": "SUSE Bug 967013 for CVE-2016-2391",
"url": "https://bugzilla.suse.com/967013"
},
{
"category": "external",
"summary": "SUSE Bug 967101 for CVE-2016-2391",
"url": "https://bugzilla.suse.com/967101"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "low"
}
],
"title": "CVE-2016-2391"
},
{
"cve": "CVE-2016-2392",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2392"
}
],
"notes": [
{
"category": "general",
"text": "The is_rndis function in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 does not properly validate USB configuration descriptor objects, which allows local guest OS administrators to cause a denial of service (NULL pointer dereference and QEMU process crash) via vectors involving a remote NDIS control message packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2392",
"url": "https://www.suse.com/security/cve/CVE-2016-2392"
},
{
"category": "external",
"summary": "SUSE Bug 967012 for CVE-2016-2392",
"url": "https://bugzilla.suse.com/967012"
},
{
"category": "external",
"summary": "SUSE Bug 967090 for CVE-2016-2392",
"url": "https://bugzilla.suse.com/967090"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "low"
}
],
"title": "CVE-2016-2392"
},
{
"cve": "CVE-2016-2538",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2538"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 allow local guest OS administrators to cause a denial of service (QEMU process crash) or obtain sensitive host memory information via a remote NDIS control message packet that is mishandled in the (1) rndis_query_response, (2) rndis_set_response, or (3) usb_net_handle_dataout function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2538",
"url": "https://www.suse.com/security/cve/CVE-2016-2538"
},
{
"category": "external",
"summary": "SUSE Bug 967969 for CVE-2016-2538",
"url": "https://bugzilla.suse.com/967969"
},
{
"category": "external",
"summary": "SUSE Bug 968004 for CVE-2016-2538",
"url": "https://bugzilla.suse.com/968004"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_02_k3.12.55_52.42-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_02-22.19.1.x86_64",
"SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.4_02-22.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-05-17T12:09:35Z",
"details": "important"
}
],
"title": "CVE-2016-2538"
}
]
}
suse-su-2016:1560-1
Vulnerability from csaf_suse
Published
2016-06-13 07:13
Modified
2016-06-13 07:13
Summary
Security update for qemu
Notes
Title of the patch
Security update for qemu
Description of the patch
qemu was updated to fix 37 security issues.
These security issues were fixed:
- CVE-2016-4439: Avoid OOB access in 53C9X emulation (bsc#980711)
- CVE-2016-4441: Avoid OOB access in 53C9X emulation (bsc#980723)
- CVE-2016-4952: Avoid OOB access in Vmware PV SCSI emulation (bsc#981266)
- CVE-2015-8817: Avoid OOB access in PCI DMA I/O (bsc#969121)
- CVE-2015-8818: Avoid OOB access in PCI DMA I/O (bsc#969122)
- CVE-2016-3710: Fixed VGA emulation based OOB access with potential for guest escape (bsc#978158)
- CVE-2016-3712: Fixed VGa emulation based DOS and OOB read access exploit (bsc#978160)
- CVE-2016-4037: Fixed USB ehci based DOS (bsc#976109)
- CVE-2016-2538: Fixed potential OOB access in USB net device emulation (bsc#967969)
- CVE-2016-2841: Fixed OOB access / hang in ne2000 emulation (bsc#969350)
- CVE-2016-2858: Avoid potential DOS when using QEMU pseudo random number generator (bsc#970036)
- CVE-2016-2857: Fixed OOB access when processing IP checksums (bsc#970037)
- CVE-2016-4001: Fixed OOB access in Stellaris enet emulated nic (bsc#975128)
- CVE-2016-4002: Fixed OOB access in MIPSnet emulated controller (bsc#975136)
- CVE-2016-4020: Fixed possible host data leakage to guest from TPR access (bsc#975700)
- CVE-2015-3214: Fixed OOB read in i8254 PIC (bsc#934069)
- CVE-2014-9718: Fixed the handling of malformed or short ide PRDTs to avoid any opportunity for guest to cause DoS by abusing that interface (bsc#928393)
- CVE-2014-3689: Fixed insufficient parameter validation in rectangle functions (bsc#901508)
- CVE-2014-3615: The VGA emulator in QEMU allowed local guest users to read host memory by setting the display to a high resolution (bsc#895528).
- CVE-2015-5239: Integer overflow in vnc_client_read() and protocol_client_msg() (bsc#944463).
- CVE-2015-5745: Buffer overflow in virtio-serial (bsc#940929).
- CVE-2015-7295: hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers are not supported, allowed remote attackers to cause a denial of service (guest network consumption) via a flood of jumbo frames on the (1) tuntap or (2) macvtap interface (bsc#947159).
- CVE-2015-7549: PCI null pointer dereferences (bsc#958917).
- CVE-2015-8504: VNC floating point exception (bsc#958491).
- CVE-2015-8558: Infinite loop in ehci_advance_state resulting in DoS (bsc#959005).
- CVE-2015-8567: A guest repeatedly activating a vmxnet3 device can leak host memory (bsc#959386).
- CVE-2015-8568: A guest repeatedly activating a vmxnet3 device can leak host memory (bsc#959386).
- CVE-2015-8613: Wrong sized memset in megasas command handler (bsc#961358).
- CVE-2015-8619: Potential DoS for long HMP sendkey command argument (bsc#960334).
- CVE-2015-8743: OOB memory access in ne2000 ioport r/w functions (bsc#960725).
- CVE-2015-8744: Incorrect l2 header validation could have lead to a crash via assert(2) call (bsc#960835).
- CVE-2015-8745: Reading IMR registers could have lead to a crash via assert(2) call (bsc#960708).
- CVE-2016-1568: AHCI use-after-free in aio port commands (bsc#961332).
- CVE-2016-1714: Potential OOB memory access in processing firmware configuration (bsc#961691).
- CVE-2016-1922: NULL pointer dereference when processing hmp i/o command (bsc#962320).
- CVE-2016-1981: Potential DoS (infinite loop) in e1000 device emulation by malicious privileged user within guest (bsc#963782).
- CVE-2016-2198: Malicious privileged guest user were able to cause DoS by writing to read-only EHCI capabilities registers (bsc#964413).
This non-security issue was fixed
- bsc#886378: qemu truncates vhd images in virt-rescue
Patchnames
SUSE-SLE-DESKTOP-12-2016-924,SUSE-SLE-SERVER-12-2016-924
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for qemu",
"title": "Title of the patch"
},
{
"category": "description",
"text": "qemu was updated to fix 37 security issues.\n\nThese security issues were fixed:\n- CVE-2016-4439: Avoid OOB access in 53C9X emulation (bsc#980711)\n- CVE-2016-4441: Avoid OOB access in 53C9X emulation (bsc#980723)\n- CVE-2016-4952: Avoid OOB access in Vmware PV SCSI emulation (bsc#981266)\n- CVE-2015-8817: Avoid OOB access in PCI DMA I/O (bsc#969121)\n- CVE-2015-8818: Avoid OOB access in PCI DMA I/O (bsc#969122)\n- CVE-2016-3710: Fixed VGA emulation based OOB access with potential for guest escape (bsc#978158)\n- CVE-2016-3712: Fixed VGa emulation based DOS and OOB read access exploit (bsc#978160)\n- CVE-2016-4037: Fixed USB ehci based DOS (bsc#976109)\n- CVE-2016-2538: Fixed potential OOB access in USB net device emulation (bsc#967969)\n- CVE-2016-2841: Fixed OOB access / hang in ne2000 emulation (bsc#969350)\n- CVE-2016-2858: Avoid potential DOS when using QEMU pseudo random number generator (bsc#970036)\n- CVE-2016-2857: Fixed OOB access when processing IP checksums (bsc#970037)\n- CVE-2016-4001: Fixed OOB access in Stellaris enet emulated nic (bsc#975128)\n- CVE-2016-4002: Fixed OOB access in MIPSnet emulated controller (bsc#975136)\n- CVE-2016-4020: Fixed possible host data leakage to guest from TPR access (bsc#975700)\n- CVE-2015-3214: Fixed OOB read in i8254 PIC (bsc#934069)\n- CVE-2014-9718: Fixed the handling of malformed or short ide PRDTs to avoid any opportunity for guest to cause DoS by abusing that interface (bsc#928393)\n- CVE-2014-3689: Fixed insufficient parameter validation in rectangle functions (bsc#901508)\n- CVE-2014-3615: The VGA emulator in QEMU allowed local guest users to read host memory by setting the display to a high resolution (bsc#895528).\n- CVE-2015-5239: Integer overflow in vnc_client_read() and protocol_client_msg() (bsc#944463).\n- CVE-2015-5745: Buffer overflow in virtio-serial (bsc#940929).\n- CVE-2015-7295: hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers are not supported, allowed remote attackers to cause a denial of service (guest network consumption) via a flood of jumbo frames on the (1) tuntap or (2) macvtap interface (bsc#947159).\n- CVE-2015-7549: PCI null pointer dereferences (bsc#958917).\n- CVE-2015-8504: VNC floating point exception (bsc#958491).\n- CVE-2015-8558: Infinite loop in ehci_advance_state resulting in DoS (bsc#959005).\n- CVE-2015-8567: A guest repeatedly activating a vmxnet3 device can leak host memory (bsc#959386).\n- CVE-2015-8568: A guest repeatedly activating a vmxnet3 device can leak host memory (bsc#959386).\n- CVE-2015-8613: Wrong sized memset in megasas command handler (bsc#961358).\n- CVE-2015-8619: Potential DoS for long HMP sendkey command argument (bsc#960334).\n- CVE-2015-8743: OOB memory access in ne2000 ioport r/w functions (bsc#960725).\n- CVE-2015-8744: Incorrect l2 header validation could have lead to a crash via assert(2) call (bsc#960835).\n- CVE-2015-8745: Reading IMR registers could have lead to a crash via assert(2) call (bsc#960708).\n- CVE-2016-1568: AHCI use-after-free in aio port commands (bsc#961332).\n- CVE-2016-1714: Potential OOB memory access in processing firmware configuration (bsc#961691).\n- CVE-2016-1922: NULL pointer dereference when processing hmp i/o command (bsc#962320).\n- CVE-2016-1981: Potential DoS (infinite loop) in e1000 device emulation by malicious privileged user within guest (bsc#963782).\n- CVE-2016-2198: Malicious privileged guest user were able to cause DoS by writing to read-only EHCI capabilities registers (bsc#964413).\n\nThis non-security issue was fixed\n- bsc#886378: qemu truncates vhd images in virt-rescue\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLE-DESKTOP-12-2016-924,SUSE-SLE-SERVER-12-2016-924",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_1560-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2016:1560-1",
"url": "https://www.suse.com/support/update/announcement/2016/suse-su-20161560-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2016:1560-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2016-June/002109.html"
},
{
"category": "self",
"summary": "SUSE Bug 886378",
"url": "https://bugzilla.suse.com/886378"
},
{
"category": "self",
"summary": "SUSE Bug 895528",
"url": "https://bugzilla.suse.com/895528"
},
{
"category": "self",
"summary": "SUSE Bug 901508",
"url": "https://bugzilla.suse.com/901508"
},
{
"category": "self",
"summary": "SUSE Bug 928393",
"url": "https://bugzilla.suse.com/928393"
},
{
"category": "self",
"summary": "SUSE Bug 934069",
"url": "https://bugzilla.suse.com/934069"
},
{
"category": "self",
"summary": "SUSE Bug 940929",
"url": "https://bugzilla.suse.com/940929"
},
{
"category": "self",
"summary": "SUSE Bug 944463",
"url": "https://bugzilla.suse.com/944463"
},
{
"category": "self",
"summary": "SUSE Bug 947159",
"url": "https://bugzilla.suse.com/947159"
},
{
"category": "self",
"summary": "SUSE Bug 958491",
"url": "https://bugzilla.suse.com/958491"
},
{
"category": "self",
"summary": "SUSE Bug 958917",
"url": "https://bugzilla.suse.com/958917"
},
{
"category": "self",
"summary": "SUSE Bug 959005",
"url": "https://bugzilla.suse.com/959005"
},
{
"category": "self",
"summary": "SUSE Bug 959386",
"url": "https://bugzilla.suse.com/959386"
},
{
"category": "self",
"summary": "SUSE Bug 960334",
"url": "https://bugzilla.suse.com/960334"
},
{
"category": "self",
"summary": "SUSE Bug 960708",
"url": "https://bugzilla.suse.com/960708"
},
{
"category": "self",
"summary": "SUSE Bug 960725",
"url": "https://bugzilla.suse.com/960725"
},
{
"category": "self",
"summary": "SUSE Bug 960835",
"url": "https://bugzilla.suse.com/960835"
},
{
"category": "self",
"summary": "SUSE Bug 961332",
"url": "https://bugzilla.suse.com/961332"
},
{
"category": "self",
"summary": "SUSE Bug 961333",
"url": "https://bugzilla.suse.com/961333"
},
{
"category": "self",
"summary": "SUSE Bug 961358",
"url": "https://bugzilla.suse.com/961358"
},
{
"category": "self",
"summary": "SUSE Bug 961556",
"url": "https://bugzilla.suse.com/961556"
},
{
"category": "self",
"summary": "SUSE Bug 961691",
"url": "https://bugzilla.suse.com/961691"
},
{
"category": "self",
"summary": "SUSE Bug 962320",
"url": "https://bugzilla.suse.com/962320"
},
{
"category": "self",
"summary": "SUSE Bug 963782",
"url": "https://bugzilla.suse.com/963782"
},
{
"category": "self",
"summary": "SUSE Bug 964413",
"url": "https://bugzilla.suse.com/964413"
},
{
"category": "self",
"summary": "SUSE Bug 967969",
"url": "https://bugzilla.suse.com/967969"
},
{
"category": "self",
"summary": "SUSE Bug 969121",
"url": "https://bugzilla.suse.com/969121"
},
{
"category": "self",
"summary": "SUSE Bug 969122",
"url": "https://bugzilla.suse.com/969122"
},
{
"category": "self",
"summary": "SUSE Bug 969350",
"url": "https://bugzilla.suse.com/969350"
},
{
"category": "self",
"summary": "SUSE Bug 970036",
"url": "https://bugzilla.suse.com/970036"
},
{
"category": "self",
"summary": "SUSE Bug 970037",
"url": "https://bugzilla.suse.com/970037"
},
{
"category": "self",
"summary": "SUSE Bug 975128",
"url": "https://bugzilla.suse.com/975128"
},
{
"category": "self",
"summary": "SUSE Bug 975136",
"url": "https://bugzilla.suse.com/975136"
},
{
"category": "self",
"summary": "SUSE Bug 975700",
"url": "https://bugzilla.suse.com/975700"
},
{
"category": "self",
"summary": "SUSE Bug 976109",
"url": "https://bugzilla.suse.com/976109"
},
{
"category": "self",
"summary": "SUSE Bug 978158",
"url": "https://bugzilla.suse.com/978158"
},
{
"category": "self",
"summary": "SUSE Bug 978160",
"url": "https://bugzilla.suse.com/978160"
},
{
"category": "self",
"summary": "SUSE Bug 980711",
"url": "https://bugzilla.suse.com/980711"
},
{
"category": "self",
"summary": "SUSE Bug 980723",
"url": "https://bugzilla.suse.com/980723"
},
{
"category": "self",
"summary": "SUSE Bug 981266",
"url": "https://bugzilla.suse.com/981266"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3615 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3615/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-3689 page",
"url": "https://www.suse.com/security/cve/CVE-2014-3689/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2014-9718 page",
"url": "https://www.suse.com/security/cve/CVE-2014-9718/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-3214 page",
"url": "https://www.suse.com/security/cve/CVE-2015-3214/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5239 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5239/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-5745 page",
"url": "https://www.suse.com/security/cve/CVE-2015-5745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7295 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7295/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-7549 page",
"url": "https://www.suse.com/security/cve/CVE-2015-7549/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8504 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8504/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8558 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8558/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8567 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8567/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8568 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8568/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8613 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8613/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8619 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8619/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8743 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8743/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8744 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8744/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8745 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8745/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8817 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8817/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2015-8818 page",
"url": "https://www.suse.com/security/cve/CVE-2015-8818/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1568 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1568/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1714 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1714/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1922 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1922/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-1981 page",
"url": "https://www.suse.com/security/cve/CVE-2016-1981/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2198 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2198/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2538 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2538/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2841 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2841/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2857 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2857/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-2858 page",
"url": "https://www.suse.com/security/cve/CVE-2016-2858/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-3710 page",
"url": "https://www.suse.com/security/cve/CVE-2016-3710/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-3712 page",
"url": "https://www.suse.com/security/cve/CVE-2016-3712/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4001 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4001/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4002 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4002/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4020 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4020/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4037 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4037/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4439 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4439/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4441 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4441/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2016-4952 page",
"url": "https://www.suse.com/security/cve/CVE-2016-4952/"
}
],
"title": "Security update for qemu",
"tracking": {
"current_release_date": "2016-06-13T07:13:18Z",
"generator": {
"date": "2016-06-13T07:13:18Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2016:1560-1",
"initial_release_date": "2016-06-13T07:13:18Z",
"revision_history": [
{
"date": "2016-06-13T07:13:18Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "qemu-ipxe-1.0.0-48.19.1.noarch",
"product": {
"name": "qemu-ipxe-1.0.0-48.19.1.noarch",
"product_id": "qemu-ipxe-1.0.0-48.19.1.noarch"
}
},
{
"category": "product_version",
"name": "qemu-seabios-1.7.4-48.19.1.noarch",
"product": {
"name": "qemu-seabios-1.7.4-48.19.1.noarch",
"product_id": "qemu-seabios-1.7.4-48.19.1.noarch"
}
},
{
"category": "product_version",
"name": "qemu-sgabios-8-48.19.1.noarch",
"product": {
"name": "qemu-sgabios-8-48.19.1.noarch",
"product_id": "qemu-sgabios-8-48.19.1.noarch"
}
},
{
"category": "product_version",
"name": "qemu-vgabios-1.7.4-48.19.1.noarch",
"product": {
"name": "qemu-vgabios-1.7.4-48.19.1.noarch",
"product_id": "qemu-vgabios-1.7.4-48.19.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-2.0.2-48.19.1.ppc64le",
"product": {
"name": "qemu-2.0.2-48.19.1.ppc64le",
"product_id": "qemu-2.0.2-48.19.1.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-block-curl-2.0.2-48.19.1.ppc64le",
"product": {
"name": "qemu-block-curl-2.0.2-48.19.1.ppc64le",
"product_id": "qemu-block-curl-2.0.2-48.19.1.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"product": {
"name": "qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"product_id": "qemu-guest-agent-2.0.2-48.19.1.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-lang-2.0.2-48.19.1.ppc64le",
"product": {
"name": "qemu-lang-2.0.2-48.19.1.ppc64le",
"product_id": "qemu-lang-2.0.2-48.19.1.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-ppc-2.0.2-48.19.1.ppc64le",
"product": {
"name": "qemu-ppc-2.0.2-48.19.1.ppc64le",
"product_id": "qemu-ppc-2.0.2-48.19.1.ppc64le"
}
},
{
"category": "product_version",
"name": "qemu-tools-2.0.2-48.19.1.ppc64le",
"product": {
"name": "qemu-tools-2.0.2-48.19.1.ppc64le",
"product_id": "qemu-tools-2.0.2-48.19.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-2.0.2-48.19.1.s390x",
"product": {
"name": "qemu-2.0.2-48.19.1.s390x",
"product_id": "qemu-2.0.2-48.19.1.s390x"
}
},
{
"category": "product_version",
"name": "qemu-block-curl-2.0.2-48.19.1.s390x",
"product": {
"name": "qemu-block-curl-2.0.2-48.19.1.s390x",
"product_id": "qemu-block-curl-2.0.2-48.19.1.s390x"
}
},
{
"category": "product_version",
"name": "qemu-guest-agent-2.0.2-48.19.1.s390x",
"product": {
"name": "qemu-guest-agent-2.0.2-48.19.1.s390x",
"product_id": "qemu-guest-agent-2.0.2-48.19.1.s390x"
}
},
{
"category": "product_version",
"name": "qemu-kvm-2.0.2-48.19.1.s390x",
"product": {
"name": "qemu-kvm-2.0.2-48.19.1.s390x",
"product_id": "qemu-kvm-2.0.2-48.19.1.s390x"
}
},
{
"category": "product_version",
"name": "qemu-lang-2.0.2-48.19.1.s390x",
"product": {
"name": "qemu-lang-2.0.2-48.19.1.s390x",
"product_id": "qemu-lang-2.0.2-48.19.1.s390x"
}
},
{
"category": "product_version",
"name": "qemu-s390-2.0.2-48.19.1.s390x",
"product": {
"name": "qemu-s390-2.0.2-48.19.1.s390x",
"product_id": "qemu-s390-2.0.2-48.19.1.s390x"
}
},
{
"category": "product_version",
"name": "qemu-tools-2.0.2-48.19.1.s390x",
"product": {
"name": "qemu-tools-2.0.2-48.19.1.s390x",
"product_id": "qemu-tools-2.0.2-48.19.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "qemu-2.0.2-48.19.1.x86_64",
"product": {
"name": "qemu-2.0.2-48.19.1.x86_64",
"product_id": "qemu-2.0.2-48.19.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-block-curl-2.0.2-48.19.1.x86_64",
"product": {
"name": "qemu-block-curl-2.0.2-48.19.1.x86_64",
"product_id": "qemu-block-curl-2.0.2-48.19.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-kvm-2.0.2-48.19.1.x86_64",
"product": {
"name": "qemu-kvm-2.0.2-48.19.1.x86_64",
"product_id": "qemu-kvm-2.0.2-48.19.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-tools-2.0.2-48.19.1.x86_64",
"product": {
"name": "qemu-tools-2.0.2-48.19.1.x86_64",
"product_id": "qemu-tools-2.0.2-48.19.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-x86-2.0.2-48.19.1.x86_64",
"product": {
"name": "qemu-x86-2.0.2-48.19.1.x86_64",
"product_id": "qemu-x86-2.0.2-48.19.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-block-rbd-2.0.2-48.19.1.x86_64",
"product": {
"name": "qemu-block-rbd-2.0.2-48.19.1.x86_64",
"product_id": "qemu-block-rbd-2.0.2-48.19.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-guest-agent-2.0.2-48.19.1.x86_64",
"product": {
"name": "qemu-guest-agent-2.0.2-48.19.1.x86_64",
"product_id": "qemu-guest-agent-2.0.2-48.19.1.x86_64"
}
},
{
"category": "product_version",
"name": "qemu-lang-2.0.2-48.19.1.x86_64",
"product": {
"name": "qemu-lang-2.0.2-48.19.1.x86_64",
"product_id": "qemu-lang-2.0.2-48.19.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 12",
"product": {
"name": "SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 12",
"product": {
"name": "SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:12"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:12"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-2.0.2-48.19.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64"
},
"product_reference": "qemu-2.0.2-48.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-curl-2.0.2-48.19.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64"
},
"product_reference": "qemu-block-curl-2.0.2-48.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ipxe-1.0.0-48.19.1.noarch as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch"
},
"product_reference": "qemu-ipxe-1.0.0-48.19.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-2.0.2-48.19.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64"
},
"product_reference": "qemu-kvm-2.0.2-48.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-seabios-1.7.4-48.19.1.noarch as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch"
},
"product_reference": "qemu-seabios-1.7.4-48.19.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-sgabios-8-48.19.1.noarch as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch"
},
"product_reference": "qemu-sgabios-8-48.19.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-tools-2.0.2-48.19.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64"
},
"product_reference": "qemu-tools-2.0.2-48.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-vgabios-1.7.4-48.19.1.noarch as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch"
},
"product_reference": "qemu-vgabios-1.7.4-48.19.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-x86-2.0.2-48.19.1.x86_64 as component of SUSE Linux Enterprise Desktop 12",
"product_id": "SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64"
},
"product_reference": "qemu-x86-2.0.2-48.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Desktop 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-2.0.2-48.19.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le"
},
"product_reference": "qemu-2.0.2-48.19.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-2.0.2-48.19.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x"
},
"product_reference": "qemu-2.0.2-48.19.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-2.0.2-48.19.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64"
},
"product_reference": "qemu-2.0.2-48.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-curl-2.0.2-48.19.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le"
},
"product_reference": "qemu-block-curl-2.0.2-48.19.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-curl-2.0.2-48.19.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x"
},
"product_reference": "qemu-block-curl-2.0.2-48.19.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-curl-2.0.2-48.19.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64"
},
"product_reference": "qemu-block-curl-2.0.2-48.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-rbd-2.0.2-48.19.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64"
},
"product_reference": "qemu-block-rbd-2.0.2-48.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-2.0.2-48.19.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le"
},
"product_reference": "qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-2.0.2-48.19.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x"
},
"product_reference": "qemu-guest-agent-2.0.2-48.19.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-2.0.2-48.19.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64"
},
"product_reference": "qemu-guest-agent-2.0.2-48.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ipxe-1.0.0-48.19.1.noarch as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch"
},
"product_reference": "qemu-ipxe-1.0.0-48.19.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-2.0.2-48.19.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x"
},
"product_reference": "qemu-kvm-2.0.2-48.19.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-2.0.2-48.19.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64"
},
"product_reference": "qemu-kvm-2.0.2-48.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-lang-2.0.2-48.19.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le"
},
"product_reference": "qemu-lang-2.0.2-48.19.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-lang-2.0.2-48.19.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x"
},
"product_reference": "qemu-lang-2.0.2-48.19.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-lang-2.0.2-48.19.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64"
},
"product_reference": "qemu-lang-2.0.2-48.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ppc-2.0.2-48.19.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le"
},
"product_reference": "qemu-ppc-2.0.2-48.19.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-s390-2.0.2-48.19.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x"
},
"product_reference": "qemu-s390-2.0.2-48.19.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-seabios-1.7.4-48.19.1.noarch as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch"
},
"product_reference": "qemu-seabios-1.7.4-48.19.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-sgabios-8-48.19.1.noarch as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch"
},
"product_reference": "qemu-sgabios-8-48.19.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-tools-2.0.2-48.19.1.ppc64le as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le"
},
"product_reference": "qemu-tools-2.0.2-48.19.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-tools-2.0.2-48.19.1.s390x as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x"
},
"product_reference": "qemu-tools-2.0.2-48.19.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-tools-2.0.2-48.19.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64"
},
"product_reference": "qemu-tools-2.0.2-48.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-vgabios-1.7.4-48.19.1.noarch as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch"
},
"product_reference": "qemu-vgabios-1.7.4-48.19.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-x86-2.0.2-48.19.1.x86_64 as component of SUSE Linux Enterprise Server 12",
"product_id": "SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64"
},
"product_reference": "qemu-x86-2.0.2-48.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-2.0.2-48.19.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le"
},
"product_reference": "qemu-2.0.2-48.19.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-2.0.2-48.19.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x"
},
"product_reference": "qemu-2.0.2-48.19.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-2.0.2-48.19.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64"
},
"product_reference": "qemu-2.0.2-48.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-curl-2.0.2-48.19.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le"
},
"product_reference": "qemu-block-curl-2.0.2-48.19.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-curl-2.0.2-48.19.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x"
},
"product_reference": "qemu-block-curl-2.0.2-48.19.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-curl-2.0.2-48.19.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64"
},
"product_reference": "qemu-block-curl-2.0.2-48.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-block-rbd-2.0.2-48.19.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64"
},
"product_reference": "qemu-block-rbd-2.0.2-48.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-2.0.2-48.19.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le"
},
"product_reference": "qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-2.0.2-48.19.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x"
},
"product_reference": "qemu-guest-agent-2.0.2-48.19.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-guest-agent-2.0.2-48.19.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64"
},
"product_reference": "qemu-guest-agent-2.0.2-48.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ipxe-1.0.0-48.19.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch"
},
"product_reference": "qemu-ipxe-1.0.0-48.19.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-2.0.2-48.19.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x"
},
"product_reference": "qemu-kvm-2.0.2-48.19.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-kvm-2.0.2-48.19.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64"
},
"product_reference": "qemu-kvm-2.0.2-48.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-lang-2.0.2-48.19.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le"
},
"product_reference": "qemu-lang-2.0.2-48.19.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-lang-2.0.2-48.19.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x"
},
"product_reference": "qemu-lang-2.0.2-48.19.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-lang-2.0.2-48.19.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64"
},
"product_reference": "qemu-lang-2.0.2-48.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-ppc-2.0.2-48.19.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le"
},
"product_reference": "qemu-ppc-2.0.2-48.19.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-s390-2.0.2-48.19.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x"
},
"product_reference": "qemu-s390-2.0.2-48.19.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-seabios-1.7.4-48.19.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch"
},
"product_reference": "qemu-seabios-1.7.4-48.19.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-sgabios-8-48.19.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch"
},
"product_reference": "qemu-sgabios-8-48.19.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-tools-2.0.2-48.19.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le"
},
"product_reference": "qemu-tools-2.0.2-48.19.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-tools-2.0.2-48.19.1.s390x as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x"
},
"product_reference": "qemu-tools-2.0.2-48.19.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-tools-2.0.2-48.19.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64"
},
"product_reference": "qemu-tools-2.0.2-48.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-vgabios-1.7.4-48.19.1.noarch as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch"
},
"product_reference": "qemu-vgabios-1.7.4-48.19.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "qemu-x86-2.0.2-48.19.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
},
"product_reference": "qemu-x86-2.0.2-48.19.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2014-3615",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3615"
}
],
"notes": [
{
"category": "general",
"text": "The VGA emulator in QEMU allows local guest users to read host memory by setting the display to a high resolution.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3615",
"url": "https://www.suse.com/security/cve/CVE-2014-3615"
},
{
"category": "external",
"summary": "SUSE Bug 895528 for CVE-2014-3615",
"url": "https://bugzilla.suse.com/895528"
},
{
"category": "external",
"summary": "SUSE Bug 918998 for CVE-2014-3615",
"url": "https://bugzilla.suse.com/918998"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "moderate"
}
],
"title": "CVE-2014-3615"
},
{
"cve": "CVE-2014-3689",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-3689"
}
],
"notes": [
{
"category": "general",
"text": "The vmware-vga driver (hw/display/vmware_vga.c) in QEMU allows local guest users to write to qemu memory locations and gain privileges via unspecified parameters related to rectangle handling.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-3689",
"url": "https://www.suse.com/security/cve/CVE-2014-3689"
},
{
"category": "external",
"summary": "SUSE Bug 1072223 for CVE-2014-3689",
"url": "https://bugzilla.suse.com/1072223"
},
{
"category": "external",
"summary": "SUSE Bug 1189862 for CVE-2014-3689",
"url": "https://bugzilla.suse.com/1189862"
},
{
"category": "external",
"summary": "SUSE Bug 901508 for CVE-2014-3689",
"url": "https://bugzilla.suse.com/901508"
},
{
"category": "external",
"summary": "SUSE Bug 962611 for CVE-2014-3689",
"url": "https://bugzilla.suse.com/962611"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "important"
}
],
"title": "CVE-2014-3689"
},
{
"cve": "CVE-2014-9718",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2014-9718"
}
],
"notes": [
{
"category": "general",
"text": "The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality in QEMU 1.0 through 2.1.3 have multiple interpretations of a function\u0027s return value, which allows guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and system crash) via a PRDT with zero complete sectors, related to the bmdma_prepare_buf and ahci_dma_prepare_buf functions.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2014-9718",
"url": "https://www.suse.com/security/cve/CVE-2014-9718"
},
{
"category": "external",
"summary": "SUSE Bug 928393 for CVE-2014-9718",
"url": "https://bugzilla.suse.com/928393"
},
{
"category": "external",
"summary": "SUSE Bug 964431 for CVE-2014-9718",
"url": "https://bugzilla.suse.com/964431"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "moderate"
}
],
"title": "CVE-2014-9718"
},
{
"cve": "CVE-2015-3214",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-3214"
}
],
"notes": [
{
"category": "general",
"text": "The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-3214",
"url": "https://www.suse.com/security/cve/CVE-2015-3214"
},
{
"category": "external",
"summary": "SUSE Bug 934069 for CVE-2015-3214",
"url": "https://bugzilla.suse.com/934069"
},
{
"category": "external",
"summary": "SUSE Bug 936025 for CVE-2015-3214",
"url": "https://bugzilla.suse.com/936025"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "moderate"
}
],
"title": "CVE-2015-3214"
},
{
"cve": "CVE-2015-5239",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5239"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message, which triggers an infinite loop.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5239",
"url": "https://www.suse.com/security/cve/CVE-2015-5239"
},
{
"category": "external",
"summary": "SUSE Bug 944463 for CVE-2015-5239",
"url": "https://bugzilla.suse.com/944463"
},
{
"category": "external",
"summary": "SUSE Bug 950367 for CVE-2015-5239",
"url": "https://bugzilla.suse.com/950367"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "moderate"
}
],
"title": "CVE-2015-5239"
},
{
"cve": "CVE-2015-5745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-5745"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users to cause a denial of service (QEMU process crash) via a crafted virtio control message.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-5745",
"url": "https://www.suse.com/security/cve/CVE-2015-5745"
},
{
"category": "external",
"summary": "SUSE Bug 940929 for CVE-2015-5745",
"url": "https://bugzilla.suse.com/940929"
},
{
"category": "external",
"summary": "SUSE Bug 950367 for CVE-2015-5745",
"url": "https://bugzilla.suse.com/950367"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "low"
}
],
"title": "CVE-2015-5745"
},
{
"cve": "CVE-2015-7295",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7295"
}
],
"notes": [
{
"category": "general",
"text": "hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers are not supported, allows remote attackers to cause a denial of service (guest network consumption) via a flood of jumbo frames on the (1) tuntap or (2) macvtap interface.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7295",
"url": "https://www.suse.com/security/cve/CVE-2015-7295"
},
{
"category": "external",
"summary": "SUSE Bug 947159 for CVE-2015-7295",
"url": "https://bugzilla.suse.com/947159"
},
{
"category": "external",
"summary": "SUSE Bug 950367 for CVE-2015-7295",
"url": "https://bugzilla.suse.com/950367"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "moderate"
}
],
"title": "CVE-2015-7295"
},
{
"cve": "CVE-2015-7549",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-7549"
}
],
"notes": [
{
"category": "general",
"text": "The MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by leveraging failure to define the .write method.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-7549",
"url": "https://www.suse.com/security/cve/CVE-2015-7549"
},
{
"category": "external",
"summary": "SUSE Bug 958917 for CVE-2015-7549",
"url": "https://bugzilla.suse.com/958917"
},
{
"category": "external",
"summary": "SUSE Bug 958918 for CVE-2015-7549",
"url": "https://bugzilla.suse.com/958918"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "low"
}
],
"title": "CVE-2015-7549"
},
{
"cve": "CVE-2015-8504",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8504"
}
],
"notes": [
{
"category": "general",
"text": "Qemu, when built with VNC display driver support, allows remote attackers to cause a denial of service (arithmetic exception and application crash) via crafted SetPixelFormat messages from a client.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8504",
"url": "https://www.suse.com/security/cve/CVE-2015-8504"
},
{
"category": "external",
"summary": "SUSE Bug 958491 for CVE-2015-8504",
"url": "https://bugzilla.suse.com/958491"
},
{
"category": "external",
"summary": "SUSE Bug 958493 for CVE-2015-8504",
"url": "https://bugzilla.suse.com/958493"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "moderate"
}
],
"title": "CVE-2015-8504"
},
{
"cve": "CVE-2015-8558",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8558"
}
],
"notes": [
{
"category": "general",
"text": "The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular isochronous transfer descriptor (iTD) list.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8558",
"url": "https://www.suse.com/security/cve/CVE-2015-8558"
},
{
"category": "external",
"summary": "SUSE Bug 959005 for CVE-2015-8558",
"url": "https://bugzilla.suse.com/959005"
},
{
"category": "external",
"summary": "SUSE Bug 959006 for CVE-2015-8558",
"url": "https://bugzilla.suse.com/959006"
},
{
"category": "external",
"summary": "SUSE Bug 976109 for CVE-2015-8558",
"url": "https://bugzilla.suse.com/976109"
},
{
"category": "external",
"summary": "SUSE Bug 976111 for CVE-2015-8558",
"url": "https://bugzilla.suse.com/976111"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "moderate"
}
],
"title": "CVE-2015-8558"
},
{
"cve": "CVE-2015-8567",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8567"
}
],
"notes": [
{
"category": "general",
"text": "Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8567",
"url": "https://www.suse.com/security/cve/CVE-2015-8567"
},
{
"category": "external",
"summary": "SUSE Bug 959386 for CVE-2015-8567",
"url": "https://bugzilla.suse.com/959386"
},
{
"category": "external",
"summary": "SUSE Bug 959387 for CVE-2015-8567",
"url": "https://bugzilla.suse.com/959387"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.7,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "low"
}
],
"title": "CVE-2015-8567"
},
{
"cve": "CVE-2015-8568",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8568"
}
],
"notes": [
{
"category": "general",
"text": "Memory leak in QEMU, when built with a VMWARE VMXNET3 paravirtual NIC emulator support, allows local guest users to cause a denial of service (host memory consumption) by trying to activate the vmxnet3 device repeatedly.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8568",
"url": "https://www.suse.com/security/cve/CVE-2015-8568"
},
{
"category": "external",
"summary": "SUSE Bug 959386 for CVE-2015-8568",
"url": "https://bugzilla.suse.com/959386"
},
{
"category": "external",
"summary": "SUSE Bug 959387 for CVE-2015-8568",
"url": "https://bugzilla.suse.com/959387"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "low"
}
],
"title": "CVE-2015-8568"
},
{
"cve": "CVE-2015-8613",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8613"
}
],
"notes": [
{
"category": "general",
"text": "Stack-based buffer overflow in the megasas_ctrl_get_info function in QEMU, when built with SCSI MegaRAID SAS HBA emulation support, allows local guest users to cause a denial of service (QEMU instance crash) via a crafted SCSI controller CTRL_GET_INFO command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8613",
"url": "https://www.suse.com/security/cve/CVE-2015-8613"
},
{
"category": "external",
"summary": "SUSE Bug 961358 for CVE-2015-8613",
"url": "https://bugzilla.suse.com/961358"
},
{
"category": "external",
"summary": "SUSE Bug 961556 for CVE-2015-8613",
"url": "https://bugzilla.suse.com/961556"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "moderate"
}
],
"title": "CVE-2015-8613"
},
{
"cve": "CVE-2015-8619",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8619"
}
],
"notes": [
{
"category": "general",
"text": "The Human Monitor Interface support in QEMU allows remote attackers to cause a denial of service (out-of-bounds write and application crash).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8619",
"url": "https://www.suse.com/security/cve/CVE-2015-8619"
},
{
"category": "external",
"summary": "SUSE Bug 960334 for CVE-2015-8619",
"url": "https://bugzilla.suse.com/960334"
},
{
"category": "external",
"summary": "SUSE Bug 965269 for CVE-2015-8619",
"url": "https://bugzilla.suse.com/965269"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "important"
}
],
"title": "CVE-2015-8619"
},
{
"cve": "CVE-2015-8743",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8743"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It could occur while performing \u0027ioport\u0027 r/w operations. A privileged (CAP_SYS_RAWIO) user/process could use this flaw to leak or corrupt QEMU memory bytes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8743",
"url": "https://www.suse.com/security/cve/CVE-2015-8743"
},
{
"category": "external",
"summary": "SUSE Bug 960725 for CVE-2015-8743",
"url": "https://bugzilla.suse.com/960725"
},
{
"category": "external",
"summary": "SUSE Bug 960726 for CVE-2015-8743",
"url": "https://bugzilla.suse.com/960726"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "moderate"
}
],
"title": "CVE-2015-8743"
},
{
"cve": "CVE-2015-8744",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8744"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It occurs when a guest sends a Layer-2 packet smaller than 22 bytes. A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8744",
"url": "https://www.suse.com/security/cve/CVE-2015-8744"
},
{
"category": "external",
"summary": "SUSE Bug 960835 for CVE-2015-8744",
"url": "https://bugzilla.suse.com/960835"
},
{
"category": "external",
"summary": "SUSE Bug 960836 for CVE-2015-8744",
"url": "https://bugzilla.suse.com/960836"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "low"
}
],
"title": "CVE-2015-8744"
},
{
"cve": "CVE-2015-8745",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8745"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with a VMWARE VMXNET3 paravirtual NIC emulator support is vulnerable to crash issue. It could occur while reading Interrupt Mask Registers (IMR). A privileged (CAP_SYS_RAWIO) guest user could use this flaw to crash the QEMU process instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8745",
"url": "https://www.suse.com/security/cve/CVE-2015-8745"
},
{
"category": "external",
"summary": "SUSE Bug 960707 for CVE-2015-8745",
"url": "https://bugzilla.suse.com/960707"
},
{
"category": "external",
"summary": "SUSE Bug 960708 for CVE-2015-8745",
"url": "https://bugzilla.suse.com/960708"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "low"
}
],
"title": "CVE-2015-8745"
},
{
"cve": "CVE-2015-8817",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8817"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built to use \u0027address_space_translate\u0027 to map an address to a MemoryRegionSection is vulnerable to an OOB r/w access issue. It could occur while doing pci_dma_read/write calls. Affects QEMU versions \u003e= 1.6.0 and \u003c= 2.3.1. A privileged user inside guest could use this flaw to crash the guest instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8817",
"url": "https://www.suse.com/security/cve/CVE-2015-8817"
},
{
"category": "external",
"summary": "SUSE Bug 969121 for CVE-2015-8817",
"url": "https://bugzilla.suse.com/969121"
},
{
"category": "external",
"summary": "SUSE Bug 969122 for CVE-2015-8817",
"url": "https://bugzilla.suse.com/969122"
},
{
"category": "external",
"summary": "SUSE Bug 969125 for CVE-2015-8817",
"url": "https://bugzilla.suse.com/969125"
},
{
"category": "external",
"summary": "SUSE Bug 969126 for CVE-2015-8817",
"url": "https://bugzilla.suse.com/969126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "moderate"
}
],
"title": "CVE-2015-8817"
},
{
"cve": "CVE-2015-8818",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2015-8818"
}
],
"notes": [
{
"category": "general",
"text": "The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2015-8818",
"url": "https://www.suse.com/security/cve/CVE-2015-8818"
},
{
"category": "external",
"summary": "SUSE Bug 969122 for CVE-2015-8818",
"url": "https://bugzilla.suse.com/969122"
},
{
"category": "external",
"summary": "SUSE Bug 969125 for CVE-2015-8818",
"url": "https://bugzilla.suse.com/969125"
},
{
"category": "external",
"summary": "SUSE Bug 969126 for CVE-2015-8818",
"url": "https://bugzilla.suse.com/969126"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "moderate"
}
],
"title": "CVE-2015-8818"
},
{
"cve": "CVE-2016-1568",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1568"
}
],
"notes": [
{
"category": "general",
"text": "Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHCI Native Command Queuing (NCQ) AIO command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1568",
"url": "https://www.suse.com/security/cve/CVE-2016-1568"
},
{
"category": "external",
"summary": "SUSE Bug 961332 for CVE-2016-1568",
"url": "https://bugzilla.suse.com/961332"
},
{
"category": "external",
"summary": "SUSE Bug 961333 for CVE-2016-1568",
"url": "https://bugzilla.suse.com/961333"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "moderate"
}
],
"title": "CVE-2016-1568"
},
{
"cve": "CVE-2016-1714",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1714"
}
],
"notes": [
{
"category": "general",
"text": "The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAP_SYS_RAWIO privilege to cause a denial of service (out-of-bounds read or write access and process crash) or possibly execute arbitrary code via an invalid current entry value in a firmware configuration.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1714",
"url": "https://www.suse.com/security/cve/CVE-2016-1714"
},
{
"category": "external",
"summary": "SUSE Bug 961691 for CVE-2016-1714",
"url": "https://bugzilla.suse.com/961691"
},
{
"category": "external",
"summary": "SUSE Bug 961692 for CVE-2016-1714",
"url": "https://bugzilla.suse.com/961692"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "moderate"
}
],
"title": "CVE-2016-1714"
},
{
"cve": "CVE-2016-1922",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1922"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp interface. In that, \u0027current_cpu\u0027 remains null, which leads to the null pointer dereference. A user or process could use this flaw to crash the QEMU instance, resulting in DoS issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1922",
"url": "https://www.suse.com/security/cve/CVE-2016-1922"
},
{
"category": "external",
"summary": "SUSE Bug 962320 for CVE-2016-1922",
"url": "https://bugzilla.suse.com/962320"
},
{
"category": "external",
"summary": "SUSE Bug 962321 for CVE-2016-1922",
"url": "https://bugzilla.suse.com/962321"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "low"
}
],
"title": "CVE-2016-1922"
},
{
"cve": "CVE-2016-1981",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-1981"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with the e1000 NIC emulation support is vulnerable to an infinite loop issue. It could occur while processing data via transmit or receive descriptors, provided the initial receive/transmit descriptor head (TDH/RDH) is set outside the allocated descriptor buffer. A privileged user inside guest could use this flaw to crash the QEMU instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-1981",
"url": "https://www.suse.com/security/cve/CVE-2016-1981"
},
{
"category": "external",
"summary": "SUSE Bug 963782 for CVE-2016-1981",
"url": "https://bugzilla.suse.com/963782"
},
{
"category": "external",
"summary": "SUSE Bug 963783 for CVE-2016-1981",
"url": "https://bugzilla.suse.com/963783"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "low"
}
],
"title": "CVE-2016-1981"
},
{
"cve": "CVE-2016-2198",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2198"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator) built with the USB EHCI emulation support is vulnerable to a null pointer dereference flaw. It could occur when an application attempts to write to EHCI capabilities registers. A privileged user inside quest could use this flaw to crash the QEMU process instance resulting in DoS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2198",
"url": "https://www.suse.com/security/cve/CVE-2016-2198"
},
{
"category": "external",
"summary": "SUSE Bug 964413 for CVE-2016-2198",
"url": "https://bugzilla.suse.com/964413"
},
{
"category": "external",
"summary": "SUSE Bug 964415 for CVE-2016-2198",
"url": "https://bugzilla.suse.com/964415"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "low"
}
],
"title": "CVE-2016-2198"
},
{
"cve": "CVE-2016-2538",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2538"
}
],
"notes": [
{
"category": "general",
"text": "Multiple integer overflows in the USB Net device emulator (hw/usb/dev-network.c) in QEMU before 2.5.1 allow local guest OS administrators to cause a denial of service (QEMU process crash) or obtain sensitive host memory information via a remote NDIS control message packet that is mishandled in the (1) rndis_query_response, (2) rndis_set_response, or (3) usb_net_handle_dataout function.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2538",
"url": "https://www.suse.com/security/cve/CVE-2016-2538"
},
{
"category": "external",
"summary": "SUSE Bug 967969 for CVE-2016-2538",
"url": "https://bugzilla.suse.com/967969"
},
{
"category": "external",
"summary": "SUSE Bug 968004 for CVE-2016-2538",
"url": "https://bugzilla.suse.com/968004"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "important"
}
],
"title": "CVE-2016-2538"
},
{
"cve": "CVE-2016-2841",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2841"
}
],
"notes": [
{
"category": "general",
"text": "The ne2000_receive function in the NE2000 NIC emulation support (hw/net/ne2000.c) in QEMU before 2.5.1 allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via crafted values for the PSTART and PSTOP registers, involving ring buffer control.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2841",
"url": "https://www.suse.com/security/cve/CVE-2016-2841"
},
{
"category": "external",
"summary": "SUSE Bug 969350 for CVE-2016-2841",
"url": "https://bugzilla.suse.com/969350"
},
{
"category": "external",
"summary": "SUSE Bug 969351 for CVE-2016-2841",
"url": "https://bugzilla.suse.com/969351"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.0"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "low"
}
],
"title": "CVE-2016-2841"
},
{
"cve": "CVE-2016-2857",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2857"
}
],
"notes": [
{
"category": "general",
"text": "The net_checksum_calculate function in net/checksum.c in QEMU allows local guest OS users to cause a denial of service (out-of-bounds heap read and crash) via the payload length in a crafted packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2857",
"url": "https://www.suse.com/security/cve/CVE-2016-2857"
},
{
"category": "external",
"summary": "SUSE Bug 970037 for CVE-2016-2857",
"url": "https://bugzilla.suse.com/970037"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.4,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "low"
}
],
"title": "CVE-2016-2857"
},
{
"cve": "CVE-2016-2858",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-2858"
}
],
"notes": [
{
"category": "general",
"text": "QEMU, when built with the Pseudo Random Number Generator (PRNG) back-end support, allows local guest OS users to cause a denial of service (process crash) via an entropy request, which triggers arbitrary stack based allocation and memory corruption.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-2858",
"url": "https://www.suse.com/security/cve/CVE-2016-2858"
},
{
"category": "external",
"summary": "SUSE Bug 970036 for CVE-2016-2858",
"url": "https://bugzilla.suse.com/970036"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "low"
}
],
"title": "CVE-2016-2858"
},
{
"cve": "CVE-2016-3710",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-3710"
}
],
"notes": [
{
"category": "general",
"text": "The VGA module in QEMU improperly performs bounds checking on banked access to video memory, which allows local guest OS administrators to execute arbitrary code on the host by changing access modes after setting the bank register, aka the \"Dark Portal\" issue.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-3710",
"url": "https://www.suse.com/security/cve/CVE-2016-3710"
},
{
"category": "external",
"summary": "SUSE Bug 978158 for CVE-2016-3710",
"url": "https://bugzilla.suse.com/978158"
},
{
"category": "external",
"summary": "SUSE Bug 978164 for CVE-2016-3710",
"url": "https://bugzilla.suse.com/978164"
},
{
"category": "external",
"summary": "SUSE Bug 978167 for CVE-2016-3710",
"url": "https://bugzilla.suse.com/978167"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "moderate"
}
],
"title": "CVE-2016-3710"
},
{
"cve": "CVE-2016-3712",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-3712"
}
],
"notes": [
{
"category": "general",
"text": "Integer overflow in the VGA module in QEMU allows local guest OS users to cause a denial of service (out-of-bounds read and QEMU process crash) by editing VGA registers in VBE mode.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-3712",
"url": "https://www.suse.com/security/cve/CVE-2016-3712"
},
{
"category": "external",
"summary": "SUSE Bug 978160 for CVE-2016-3712",
"url": "https://bugzilla.suse.com/978160"
},
{
"category": "external",
"summary": "SUSE Bug 978164 for CVE-2016-3712",
"url": "https://bugzilla.suse.com/978164"
},
{
"category": "external",
"summary": "SUSE Bug 978167 for CVE-2016-3712",
"url": "https://bugzilla.suse.com/978167"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "low"
}
],
"title": "CVE-2016-3712"
},
{
"cve": "CVE-2016-4001",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4001"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the stellaris_enet_receive function in hw/net/stellaris_enet.c in QEMU, when the Stellaris ethernet controller is configured to accept large packets, allows remote attackers to cause a denial of service (QEMU crash) via a large packet.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4001",
"url": "https://www.suse.com/security/cve/CVE-2016-4001"
},
{
"category": "external",
"summary": "SUSE Bug 975128 for CVE-2016-4001",
"url": "https://bugzilla.suse.com/975128"
},
{
"category": "external",
"summary": "SUSE Bug 975130 for CVE-2016-4001",
"url": "https://bugzilla.suse.com/975130"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.6,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "moderate"
}
],
"title": "CVE-2016-4001"
},
{
"cve": "CVE-2016-4002",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4002"
}
],
"notes": [
{
"category": "general",
"text": "Buffer overflow in the mipsnet_receive function in hw/net/mipsnet.c in QEMU, when the guest NIC is configured to accept large packets, allows remote attackers to cause a denial of service (memory corruption and QEMU crash) or possibly execute arbitrary code via a packet larger than 1514 bytes.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4002",
"url": "https://www.suse.com/security/cve/CVE-2016-4002"
},
{
"category": "external",
"summary": "SUSE Bug 975136 for CVE-2016-4002",
"url": "https://bugzilla.suse.com/975136"
},
{
"category": "external",
"summary": "SUSE Bug 975138 for CVE-2016-4002",
"url": "https://bugzilla.suse.com/975138"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "moderate"
}
],
"title": "CVE-2016-4002"
},
{
"cve": "CVE-2016-4020",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4020"
}
],
"notes": [
{
"category": "general",
"text": "The patch_instruction function in hw/i386/kvmvapic.c in QEMU does not initialize the imm32 variable, which allows local guest OS administrators to obtain sensitive information from host stack memory by accessing the Task Priority Register (TPR).",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4020",
"url": "https://www.suse.com/security/cve/CVE-2016-4020"
},
{
"category": "external",
"summary": "SUSE Bug 975700 for CVE-2016-4020",
"url": "https://bugzilla.suse.com/975700"
},
{
"category": "external",
"summary": "SUSE Bug 975907 for CVE-2016-4020",
"url": "https://bugzilla.suse.com/975907"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "low"
}
],
"title": "CVE-2016-4020"
},
{
"cve": "CVE-2016-4037",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4037"
}
],
"notes": [
{
"category": "general",
"text": "The ehci_advance_state function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of service (infinite loop and CPU consumption) via a circular split isochronous transfer descriptor (siTD) list, a related issue to CVE-2015-8558.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4037",
"url": "https://www.suse.com/security/cve/CVE-2016-4037"
},
{
"category": "external",
"summary": "SUSE Bug 959005 for CVE-2016-4037",
"url": "https://bugzilla.suse.com/959005"
},
{
"category": "external",
"summary": "SUSE Bug 959006 for CVE-2016-4037",
"url": "https://bugzilla.suse.com/959006"
},
{
"category": "external",
"summary": "SUSE Bug 976109 for CVE-2016-4037",
"url": "https://bugzilla.suse.com/976109"
},
{
"category": "external",
"summary": "SUSE Bug 976111 for CVE-2016-4037",
"url": "https://bugzilla.suse.com/976111"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "low"
}
],
"title": "CVE-2016-4037"
},
{
"cve": "CVE-2016-4439",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4439"
}
],
"notes": [
{
"category": "general",
"text": "The esp_reg_write function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check command buffer length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) or potentially execute arbitrary code on the QEMU host via unspecified vectors.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4439",
"url": "https://www.suse.com/security/cve/CVE-2016-4439"
},
{
"category": "external",
"summary": "SUSE Bug 980711 for CVE-2016-4439",
"url": "https://bugzilla.suse.com/980711"
},
{
"category": "external",
"summary": "SUSE Bug 980716 for CVE-2016-4439",
"url": "https://bugzilla.suse.com/980716"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "low"
}
],
"title": "CVE-2016-4439"
},
{
"cve": "CVE-2016-4441",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4441"
}
],
"notes": [
{
"category": "general",
"text": "The get_cmd function in hw/scsi/esp.c in the 53C9X Fast SCSI Controller (FSC) support in QEMU does not properly check DMA length, which allows local guest OS administrators to cause a denial of service (out-of-bounds write and QEMU process crash) via unspecified vectors, involving an SCSI command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4441",
"url": "https://www.suse.com/security/cve/CVE-2016-4441"
},
{
"category": "external",
"summary": "SUSE Bug 980723 for CVE-2016-4441",
"url": "https://bugzilla.suse.com/980723"
},
{
"category": "external",
"summary": "SUSE Bug 980724 for CVE-2016-4441",
"url": "https://bugzilla.suse.com/980724"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "low"
}
],
"title": "CVE-2016-4441"
},
{
"cve": "CVE-2016-4952",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2016-4952"
}
],
"notes": [
{
"category": "general",
"text": "QEMU (aka Quick Emulator), when built with VMWARE PVSCSI paravirtual SCSI bus emulation support, allows local guest OS administrators to cause a denial of service (out-of-bounds array access) via vectors related to the (1) PVSCSI_CMD_SETUP_RINGS or (2) PVSCSI_CMD_SETUP_MSG_RING SCSI command.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2016-4952",
"url": "https://www.suse.com/security/cve/CVE-2016-4952"
},
{
"category": "external",
"summary": "SUSE Bug 981266 for CVE-2016-4952",
"url": "https://bugzilla.suse.com/981266"
},
{
"category": "external",
"summary": "SUSE Bug 981276 for CVE-2016-4952",
"url": "https://bugzilla.suse.com/981276"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Desktop 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Desktop 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Desktop 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server 12:qemu-x86-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-curl-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-block-rbd-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-guest-agent-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ipxe-1.0.0-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-kvm-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-lang-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-ppc-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-s390-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-seabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-sgabios-8-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.s390x",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-tools-2.0.2-48.19.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-vgabios-1.7.4-48.19.1.noarch",
"SUSE Linux Enterprise Server for SAP Applications 12:qemu-x86-2.0.2-48.19.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2016-06-13T07:13:18Z",
"details": "low"
}
],
"title": "CVE-2016-4952"
}
]
}
gsd-2015-8818
Vulnerability from gsd
Modified
2023-12-13 01:20
Details
The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors.
Aliases
Aliases
{
"GSD": {
"alias": "CVE-2015-8818",
"description": "The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors.",
"id": "GSD-2015-8818",
"references": [
"https://www.suse.com/security/cve/CVE-2015-8818.html",
"https://access.redhat.com/errata/RHSA-2016:2706",
"https://access.redhat.com/errata/RHSA-2016:2705",
"https://access.redhat.com/errata/RHSA-2016:2704",
"https://access.redhat.com/errata/RHSA-2016:2671",
"https://access.redhat.com/errata/RHSA-2016:2670",
"https://advisories.mageia.org/CVE-2015-8818.html"
]
},
"gsd": {
"metadata": {
"exploitCode": "unknown",
"remediation": "unknown",
"reportConfidence": "confirmed",
"type": "vulnerability"
},
"osvSchema": {
"aliases": [
"CVE-2015-8818"
],
"details": "The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors.",
"id": "GSD-2015-8818",
"modified": "2023-12-13T01:20:03.847301Z",
"schema_version": "1.4.0"
}
},
"namespaces": {
"cve.org": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2015-8818",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_affected": "=",
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "http://rhn.redhat.com/errata/RHSA-2016-2670.html",
"refsource": "MISC",
"url": "http://rhn.redhat.com/errata/RHSA-2016-2670.html"
},
{
"name": "http://rhn.redhat.com/errata/RHSA-2016-2671.html",
"refsource": "MISC",
"url": "http://rhn.redhat.com/errata/RHSA-2016-2671.html"
},
{
"name": "http://rhn.redhat.com/errata/RHSA-2016-2704.html",
"refsource": "MISC",
"url": "http://rhn.redhat.com/errata/RHSA-2016-2704.html"
},
{
"name": "http://rhn.redhat.com/errata/RHSA-2016-2705.html",
"refsource": "MISC",
"url": "http://rhn.redhat.com/errata/RHSA-2016-2705.html"
},
{
"name": "http://rhn.redhat.com/errata/RHSA-2016-2706.html",
"refsource": "MISC",
"url": "http://rhn.redhat.com/errata/RHSA-2016-2706.html"
},
{
"name": "http://www.openwall.com/lists/oss-security/2016/03/01/1",
"refsource": "MISC",
"url": "http://www.openwall.com/lists/oss-security/2016/03/01/1"
},
{
"name": "http://www.openwall.com/lists/oss-security/2016/03/01/10",
"refsource": "MISC",
"url": "http://www.openwall.com/lists/oss-security/2016/03/01/10"
},
{
"name": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=b242e0e0e2969c044a318e56f7988bbd84de1f63",
"refsource": "MISC",
"url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=b242e0e0e2969c044a318e56f7988bbd84de1f63"
},
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1300771",
"refsource": "MISC",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300771"
}
]
}
},
"nvd.nist.gov": {
"configurations": {
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "2.3.1",
"vulnerable": true
}
],
"operator": "OR"
}
]
},
"cve": {
"CVE_data_meta": {
"ASSIGNER": "secalert@redhat.com",
"ID": "CVE-2015-8818"
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "en",
"value": "The cpu_physical_memory_write_rom_internal function in exec.c in QEMU (aka Quick Emulator) does not properly skip MMIO regions, which allows local privileged guest users to cause a denial of service (guest crash) via unspecified vectors."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=1300771",
"refsource": "CONFIRM",
"tags": [
"Issue Tracking"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1300771"
},
{
"name": "[oss-security] 20160301 Re: CVE request Qemu: OOB access in address_space_rw leads to segmentation fault",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://www.openwall.com/lists/oss-security/2016/03/01/10"
},
{
"name": "[oss-security] 20160301 CVE request Qemu: OOB access in address_space_rw leads to segmentation fault",
"refsource": "MLIST",
"tags": [
"Mailing List",
"Third Party Advisory"
],
"url": "http://www.openwall.com/lists/oss-security/2016/03/01/1"
},
{
"name": "RHSA-2016:2706",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2706.html"
},
{
"name": "RHSA-2016:2705",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2705.html"
},
{
"name": "RHSA-2016:2704",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2704.html"
},
{
"name": "RHSA-2016:2671",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2671.html"
},
{
"name": "RHSA-2016:2670",
"refsource": "REDHAT",
"tags": [
"Third Party Advisory"
],
"url": "http://rhn.redhat.com/errata/RHSA-2016-2670.html"
},
{
"name": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=b242e0e0e2969c044a318e56f7988bbd84de1f63",
"refsource": "MISC",
"tags": [],
"url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=b242e0e0e2969c044a318e56f7988bbd84de1f63"
}
]
}
},
"impact": {
"baseMetricV2": {
"acInsufInfo": false,
"cvssV2": {
"accessComplexity": "LOW",
"accessVector": "LOCAL",
"authentication": "NONE",
"availabilityImpact": "PARTIAL",
"baseScore": 2.1,
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P",
"version": "2.0"
},
"exploitabilityScore": 3.9,
"impactScore": 2.9,
"obtainAllPrivilege": false,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "LOW",
"userInteractionRequired": false
},
"baseMetricV3": {
"cvssV3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.8,
"impactScore": 3.6
}
},
"lastModifiedDate": "2023-02-12T23:15Z",
"publishedDate": "2016-12-29T22:59Z"
}
}
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…