csaf_suse - suse-su-2016:2473-1

suse-su-2016:2473-1

Vulnerability from csaf_suse

Published

2016-10-07 09:05

Modified

2016-10-07 09:05

Summary

Security update for xen

Notes

Title of the patch

Security update for xen

Description of the patch

This update for xen fixes several issues. These security issues were fixed: - CVE-2016-7092: The get_page_from_l3e function in arch/x86/mm.c in Xen allowed local 32-bit PV guest OS administrators to gain host OS privileges via vectors related to L3 recursive pagetables (bsc#995785). - CVE-2016-7093: Xen allowed local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation (bsc#995789). - CVE-2016-7094: Buffer overflow in Xen allowed local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial of service via a pagetable update (bsc#995792). - CVE-2016-6836: Information leakage in vmxnet3_complete_packet (bsc#994761). - CVE-2016-6888: Integer overflow in packet initialisation in VMXNET3 device driver. Aprivileged user inside guest c... (bsc#994772). - CVE-2016-6833: Use after free while writing (bsc#994775). - CVE-2016-6835: Buffer overflow in vmxnet_tx_pkt_parse_headers() in vmxnet3 deviceemulation. (bsc#994625). - CVE-2016-6834: An infinite loop during packet fragmentation (bsc#994421). - CVE-2016-6258: The PV pagetable code in arch/x86/mm.c in Xen allowed local 32-bit PV guest OS administrators to gain host OS privileges by leveraging fast-paths for updating pagetable entries (bsc#988675). - CVE-2016-6259: Xen did not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allowed local 32-bit PV guest OS kernels to cause a denial of service (hypervisor and VM crash) by triggering a safety check (bsc#988676). These non-security issues were fixed: - bsc#991934: Hypervisor crash in csched_acct - bsc#992224: During boot of Xen Hypervisor, failed to get contiguous memory for DMA - bsc#955104: Virsh reports error 'one or more references were leaked after disconnect from hypervisor' when 'virsh save' failed due to 'no response from client after 6 keepalive messages' - bsc#959552: Migration of HVM guest leads into libvirt segmentation fault - bsc#993665: Migration of xen guests finishes in: One or more references were leaked after disconnect from the hypervisor - bsc#959330: Guest migrations using virsh results in error 'Internal error: received hangup / error event on socket' - bsc#990500: VM virsh migration fails with keepalive error: ':virKeepAliveTimerInternal:143 : No response from client' - bsc#953518: Unplug also SCSI disks in qemu-xen-traditional for upstream unplug protocol - bsc#953518: xen_platform: unplug also SCSI disks in qemu-xen - bsc#971949: xl: Support (by ignoring) xl migrate --live. xl migrations are always live - bsc#970135: New virtualization project clock test randomly fails on Xen - bsc#990970: Add PMU support for Intel E7-8867 v4 (fam=6, model=79)

Patchnames

SUSE-SLE-DESKTOP-12-SP1-2016-1444,SUSE-SLE-SDK-12-SP1-2016-1444,SUSE-SLE-SERVER-12-SP1-2016-1444

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for xen",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for xen fixes several issues.\n\nThese security issues were fixed:\n- CVE-2016-7092: The get_page_from_l3e function in arch/x86/mm.c in Xen allowed local 32-bit PV guest OS administrators to gain host OS privileges via vectors related to L3 recursive pagetables (bsc#995785).\n- CVE-2016-7093: Xen allowed local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation (bsc#995789).\n- CVE-2016-7094: Buffer overflow in Xen allowed local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial of service via a pagetable update (bsc#995792).\n- CVE-2016-6836: Information leakage in vmxnet3_complete_packet (bsc#994761).\n- CVE-2016-6888: Integer overflow in packet initialisation in VMXNET3 device driver. Aprivileged user inside guest c... (bsc#994772).\n- CVE-2016-6833: Use after free while writing (bsc#994775).\n- CVE-2016-6835: Buffer overflow in vmxnet_tx_pkt_parse_headers() in vmxnet3 deviceemulation. (bsc#994625).\n- CVE-2016-6834: An infinite loop during packet fragmentation (bsc#994421).\n- CVE-2016-6258: The PV pagetable code in arch/x86/mm.c in Xen allowed local 32-bit PV guest OS administrators to gain host OS privileges by leveraging fast-paths for updating pagetable entries (bsc#988675).\n- CVE-2016-6259: Xen did not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allowed local 32-bit PV guest OS kernels to cause a denial of service (hypervisor and VM crash) by triggering a safety check (bsc#988676).\n\nThese non-security issues were fixed:\n- bsc#991934: Hypervisor crash in csched_acct\n- bsc#992224: During boot of Xen Hypervisor, failed to get contiguous memory for DMA\n- bsc#955104: Virsh reports error \u0027one or more references were leaked after disconnect from hypervisor\u0027 when \u0027virsh save\u0027 failed due to \u0027no response from client after 6 keepalive messages\u0027\n- bsc#959552: Migration of HVM guest leads into libvirt segmentation fault\n- bsc#993665: Migration of xen guests finishes in: One or more references were leaked after disconnect from the hypervisor\n- bsc#959330: Guest migrations using virsh results in error \u0027Internal error: received hangup / error event on socket\u0027\n- bsc#990500: VM virsh migration fails with keepalive error: \u0027:virKeepAliveTimerInternal:143 : No response from client\u0027\n- bsc#953518: Unplug also SCSI disks in qemu-xen-traditional for upstream unplug protocol\n- bsc#953518: xen_platform: unplug also SCSI disks in qemu-xen\n- bsc#971949: xl: Support (by ignoring) xl migrate --live. xl migrations are always live\n- bsc#970135: New virtualization project clock test randomly fails on Xen\n- bsc#990970: Add PMU support for Intel E7-8867 v4 (fam=6, model=79)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-SLE-DESKTOP-12-SP1-2016-1444,SUSE-SLE-SDK-12-SP1-2016-1444,SUSE-SLE-SERVER-12-SP1-2016-1444",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2016_2473-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2016:2473-1",
        "url": "https://www.suse.com/support/update/announcement/2016/suse-su-20162473-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2016:2473-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2016-October/002317.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 953518",
        "url": "https://bugzilla.suse.com/953518"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 955104",
        "url": "https://bugzilla.suse.com/955104"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 959330",
        "url": "https://bugzilla.suse.com/959330"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 959552",
        "url": "https://bugzilla.suse.com/959552"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 970135",
        "url": "https://bugzilla.suse.com/970135"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 971949",
        "url": "https://bugzilla.suse.com/971949"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 988675",
        "url": "https://bugzilla.suse.com/988675"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 988676",
        "url": "https://bugzilla.suse.com/988676"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 990500",
        "url": "https://bugzilla.suse.com/990500"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 990970",
        "url": "https://bugzilla.suse.com/990970"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 991934",
        "url": "https://bugzilla.suse.com/991934"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 992224",
        "url": "https://bugzilla.suse.com/992224"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 993665",
        "url": "https://bugzilla.suse.com/993665"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 994421",
        "url": "https://bugzilla.suse.com/994421"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 994625",
        "url": "https://bugzilla.suse.com/994625"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 994761",
        "url": "https://bugzilla.suse.com/994761"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 994772",
        "url": "https://bugzilla.suse.com/994772"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 994775",
        "url": "https://bugzilla.suse.com/994775"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 995785",
        "url": "https://bugzilla.suse.com/995785"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 995789",
        "url": "https://bugzilla.suse.com/995789"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 995792",
        "url": "https://bugzilla.suse.com/995792"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6258 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6258/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6259 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6259/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6833 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6833/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6834 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6834/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6835 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6835/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6836 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6836/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-6888 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-6888/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-7092 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-7092/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-7093 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-7093/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-7094 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-7094/"
      }
    ],
    "title": "Security update for xen",
    "tracking": {
      "current_release_date": "2016-10-07T09:05:05Z",
      "generator": {
        "date": "2016-10-07T09:05:05Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2016:2473-1",
      "initial_release_date": "2016-10-07T09:05:05Z",
      "revision_history": [
        {
          "date": "2016-10-07T09:05:05Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xen-4.5.3_10-20.1.x86_64",
                "product": {
                  "name": "xen-4.5.3_10-20.1.x86_64",
                  "product_id": "xen-4.5.3_10-20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
                "product": {
                  "name": "xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
                  "product_id": "xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-libs-4.5.3_10-20.1.x86_64",
                "product": {
                  "name": "xen-libs-4.5.3_10-20.1.x86_64",
                  "product_id": "xen-libs-4.5.3_10-20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-libs-32bit-4.5.3_10-20.1.x86_64",
                "product": {
                  "name": "xen-libs-32bit-4.5.3_10-20.1.x86_64",
                  "product_id": "xen-libs-32bit-4.5.3_10-20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-devel-4.5.3_10-20.1.x86_64",
                "product": {
                  "name": "xen-devel-4.5.3_10-20.1.x86_64",
                  "product_id": "xen-devel-4.5.3_10-20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-doc-html-4.5.3_10-20.1.x86_64",
                "product": {
                  "name": "xen-doc-html-4.5.3_10-20.1.x86_64",
                  "product_id": "xen-doc-html-4.5.3_10-20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-tools-4.5.3_10-20.1.x86_64",
                "product": {
                  "name": "xen-tools-4.5.3_10-20.1.x86_64",
                  "product_id": "xen-tools-4.5.3_10-20.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-tools-domU-4.5.3_10-20.1.x86_64",
                "product": {
                  "name": "xen-tools-domU-4.5.3_10-20.1.x86_64",
                  "product_id": "xen-tools-domU-4.5.3_10-20.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Desktop 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Desktop 12 SP1",
                  "product_id": "SUSE Linux Enterprise Desktop 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sled:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 12 SP1",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-sdk:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP1",
                  "product_id": "SUSE Linux Enterprise Server 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp1"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-4.5.3_10-20.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64"
        },
        "product_reference": "xen-4.5.3_10-20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64"
        },
        "product_reference": "xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-4.5.3_10-20.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64"
        },
        "product_reference": "xen-libs-4.5.3_10-20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-32bit-4.5.3_10-20.1.x86_64 as component of SUSE Linux Enterprise Desktop 12 SP1",
          "product_id": "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64"
        },
        "product_reference": "xen-libs-32bit-4.5.3_10-20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Desktop 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-devel-4.5.3_10-20.1.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP1",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
        },
        "product_reference": "xen-devel-4.5.3_10-20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-4.5.3_10-20.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64"
        },
        "product_reference": "xen-4.5.3_10-20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-doc-html-4.5.3_10-20.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64"
        },
        "product_reference": "xen-doc-html-4.5.3_10-20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64"
        },
        "product_reference": "xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-4.5.3_10-20.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64"
        },
        "product_reference": "xen-libs-4.5.3_10-20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-32bit-4.5.3_10-20.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64"
        },
        "product_reference": "xen-libs-32bit-4.5.3_10-20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-tools-4.5.3_10-20.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64"
        },
        "product_reference": "xen-tools-4.5.3_10-20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-tools-domU-4.5.3_10-20.1.x86_64 as component of SUSE Linux Enterprise Server 12 SP1",
          "product_id": "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64"
        },
        "product_reference": "xen-tools-domU-4.5.3_10-20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-4.5.3_10-20.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64"
        },
        "product_reference": "xen-4.5.3_10-20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-doc-html-4.5.3_10-20.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64"
        },
        "product_reference": "xen-doc-html-4.5.3_10-20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64"
        },
        "product_reference": "xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-4.5.3_10-20.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64"
        },
        "product_reference": "xen-libs-4.5.3_10-20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-32bit-4.5.3_10-20.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64"
        },
        "product_reference": "xen-libs-32bit-4.5.3_10-20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-tools-4.5.3_10-20.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64"
        },
        "product_reference": "xen-tools-4.5.3_10-20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-tools-domU-4.5.3_10-20.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP1",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64"
        },
        "product_reference": "xen-tools-domU-4.5.3_10-20.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP1"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2016-6258",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6258"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS administrators to gain host OS privileges by leveraging fast-paths for updating pagetable entries.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6258",
          "url": "https://www.suse.com/security/cve/CVE-2016-6258"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1072198 for CVE-2016-6258",
          "url": "https://bugzilla.suse.com/1072198"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1072223 for CVE-2016-6258",
          "url": "https://bugzilla.suse.com/1072223"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 988675 for CVE-2016-6258",
          "url": "https://bugzilla.suse.com/988675"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 988692 for CVE-2016-6258",
          "url": "https://bugzilla.suse.com/988692"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-07T09:05:05Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-6258"
    },
    {
      "cve": "CVE-2016-6259",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6259"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bit PV guest OS kernels to cause a denial of service (hypervisor and VM crash) by triggering a safety check.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6259",
          "url": "https://www.suse.com/security/cve/CVE-2016-6259"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 988676 for CVE-2016-6259",
          "url": "https://bugzilla.suse.com/988676"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 988694 for CVE-2016-6259",
          "url": "https://bugzilla.suse.com/988694"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.2,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-07T09:05:05Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-6259"
    },
    {
      "cve": "CVE-2016-6833",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6833"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Use-after-free vulnerability in the vmxnet3_io_bar0_write function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU instance crash) by leveraging failure to check if the device is active.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6833",
          "url": "https://www.suse.com/security/cve/CVE-2016-6833"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 994774 for CVE-2016-6833",
          "url": "https://bugzilla.suse.com/994774"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 994775 for CVE-2016-6833",
          "url": "https://bugzilla.suse.com/994775"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-07T09:05:05Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-6833"
    },
    {
      "cve": "CVE-2016-6834",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6834"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The net_tx_pkt_do_sw_fragmentation function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a zero length for the current fragment length.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6834",
          "url": "https://www.suse.com/security/cve/CVE-2016-6834"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 994418 for CVE-2016-6834",
          "url": "https://bugzilla.suse.com/994418"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 994421 for CVE-2016-6834",
          "url": "https://bugzilla.suse.com/994421"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-07T09:05:05Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-6834"
    },
    {
      "cve": "CVE-2016-6835",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6835"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The vmxnet_tx_pkt_parse_headers function in hw/net/vmxnet_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (buffer over-read) by leveraging failure to check IP header length.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6835",
          "url": "https://www.suse.com/security/cve/CVE-2016-6835"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 994605 for CVE-2016-6835",
          "url": "https://bugzilla.suse.com/994605"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 994625 for CVE-2016-6835",
          "url": "https://bugzilla.suse.com/994625"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-07T09:05:05Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-6835"
    },
    {
      "cve": "CVE-2016-6836",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6836"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The vmxnet3_complete_packet function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host memory information by leveraging failure to initialize the txcq_descr object.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6836",
          "url": "https://www.suse.com/security/cve/CVE-2016-6836"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 994760 for CVE-2016-6836",
          "url": "https://bugzilla.suse.com/994760"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 994761 for CVE-2016-6836",
          "url": "https://bugzilla.suse.com/994761"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-07T09:05:05Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-6836"
    },
    {
      "cve": "CVE-2016-6888",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-6888"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU process crash) via the maximum fragmentation count, which triggers an unchecked multiplication and NULL pointer dereference.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-6888",
          "url": "https://www.suse.com/security/cve/CVE-2016-6888"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 994771 for CVE-2016-6888",
          "url": "https://bugzilla.suse.com/994771"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 994772 for CVE-2016-6888",
          "url": "https://bugzilla.suse.com/994772"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.4,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-07T09:05:05Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-6888"
    },
    {
      "cve": "CVE-2016-7092",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-7092"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS administrators to gain host OS privileges via vectors related to L3 recursive pagetables.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-7092",
          "url": "https://www.suse.com/security/cve/CVE-2016-7092"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 995785 for CVE-2016-7092",
          "url": "https://bugzilla.suse.com/995785"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.5,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-07T09:05:05Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-7092"
    },
    {
      "cve": "CVE-2016-7093",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-7093"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-7093",
          "url": "https://www.suse.com/security/cve/CVE-2016-7093"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 995789 for CVE-2016-7093",
          "url": "https://bugzilla.suse.com/995789"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-07T09:05:05Z",
          "details": "important"
        }
      ],
      "title": "CVE-2016-7093"
    },
    {
      "cve": "CVE-2016-7094",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-7094"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Buffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial of service via a pagetable update.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-7094",
          "url": "https://www.suse.com/security/cve/CVE-2016-7094"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 995792 for CVE-2016-7094",
          "url": "https://bugzilla.suse.com/995792"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 4.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-doc-html-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-kmp-default-4.5.3_10_k3.12.62_60.62-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-32bit-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-libs-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP1:xen-tools-domU-4.5.3_10-20.1.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.3_10-20.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2016-10-07T09:05:05Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-7094"
    }
  ]
}

CVE-2016-6888 (GCVE-0-2016-6888)

Vulnerability from cvelistv5

Published

2016-12-10 00:00

Modified

2024-08-06 01:43

Severity ?

CWE

Summary

Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU process crash) via the maximum fragmentation count, which triggers an unchecked multiplication and NULL pointer dereference.

References

►

URL

Tags

	http://www.securityfocus.com/bid/92556	vdb-entry, x_refsource_BID
	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=47882fa4975bf0b58dd74474329fdd7154e8f04c	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/08/19/6	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:2392	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201609-01	vendor-advisory, x_refsource_GENTOO
	https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg03176.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/08/19/10	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:2408	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:43:38.554Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "92556",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92556"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=47882fa4975bf0b58dd74474329fdd7154e8f04c"
          },
          {
            "name": "[oss-security] 20160819 CVE Request: Qemu: net: vmxnet: integer overflow in packet initialisation",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/08/19/6"
          },
          {
            "name": "RHSA-2017:2392",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2392"
          },
          {
            "name": "GLSA-201609-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201609-01"
          },
          {
            "name": "[qemu-devel] 20160818 [PULL 1/2] net: vmxnet: use g_new for pkt initialisation",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg03176.html"
          },
          {
            "name": "[oss-security] 20160819 Re: CVE Request: Qemu: net: vmxnet: integer overflow in packet initialisation",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/08/19/10"
          },
          {
            "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
          },
          {
            "name": "RHSA-2017:2408",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2408"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-18T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU process crash) via the maximum fragmentation count, which triggers an unchecked multiplication and NULL pointer dereference."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-12-01T10:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "92556",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92556"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=47882fa4975bf0b58dd74474329fdd7154e8f04c"
        },
        {
          "name": "[oss-security] 20160819 CVE Request: Qemu: net: vmxnet: integer overflow in packet initialisation",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/08/19/6"
        },
        {
          "name": "RHSA-2017:2392",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2392"
        },
        {
          "name": "GLSA-201609-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201609-01"
        },
        {
          "name": "[qemu-devel] 20160818 [PULL 1/2] net: vmxnet: use g_new for pkt initialisation",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg03176.html"
        },
        {
          "name": "[oss-security] 20160819 Re: CVE Request: Qemu: net: vmxnet: integer overflow in packet initialisation",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/08/19/10"
        },
        {
          "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
        },
        {
          "name": "RHSA-2017:2408",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2408"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-6888",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Integer overflow in the net_tx_pkt_init function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU process crash) via the maximum fragmentation count, which triggers an unchecked multiplication and NULL pointer dereference."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "92556",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92556"
            },
            {
              "name": "http://git.qemu.org/?p=qemu.git;a=commit;h=47882fa4975bf0b58dd74474329fdd7154e8f04c",
              "refsource": "CONFIRM",
              "url": "http://git.qemu.org/?p=qemu.git;a=commit;h=47882fa4975bf0b58dd74474329fdd7154e8f04c"
            },
            {
              "name": "[oss-security] 20160819 CVE Request: Qemu: net: vmxnet: integer overflow in packet initialisation",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/08/19/6"
            },
            {
              "name": "RHSA-2017:2392",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2392"
            },
            {
              "name": "GLSA-201609-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201609-01"
            },
            {
              "name": "[qemu-devel] 20160818 [PULL 1/2] net: vmxnet: use g_new for pkt initialisation",
              "refsource": "MLIST",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg03176.html"
            },
            {
              "name": "[oss-security] 20160819 Re: CVE Request: Qemu: net: vmxnet: integer overflow in packet initialisation",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2016/08/19/10"
            },
            {
              "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
            },
            {
              "name": "RHSA-2017:2408",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2408"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-6888",
    "datePublished": "2016-12-10T00:00:00",
    "dateReserved": "2016-08-19T00:00:00",
    "dateUpdated": "2024-08-06T01:43:38.554Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-6834 (GCVE-0-2016-6834)

Vulnerability from cvelistv5

Published

2016-12-10 00:00

Modified

2024-08-06 01:43

Severity ?

CWE

Summary

The net_tx_pkt_do_sw_fragmentation function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a zero length for the current fragment length.

References

►

URL

Tags

	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ead315e43ea0c2ca3491209c6c8db8ce3f2bbe05	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/92446	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201609-01	vendor-advisory, x_refsource_GENTOO
	http://www.openwall.com/lists/oss-security/2016/08/18/7	mailing-list, x_refsource_MLIST
	https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg01601.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/08/11/8	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:43:37.903Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ead315e43ea0c2ca3491209c6c8db8ce3f2bbe05"
          },
          {
            "name": "92446",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92446"
          },
          {
            "name": "GLSA-201609-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201609-01"
          },
          {
            "name": "[oss-security] 20160817 Re: CVE request Qemu: an infinite loop during packet fragmentation",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/08/18/7"
          },
          {
            "name": "[qemu-devel] 20160809 [PULL 1/3] net: check fragment length during fragmentation",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg01601.html"
          },
          {
            "name": "[oss-security] 20160812 CVE request Qemu: an infinite loop during packet fragmentation",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/08/11/8"
          },
          {
            "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The net_tx_pkt_do_sw_fragmentation function in hw/net/net_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) via a zero length for the current fragment length."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-12-01T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=ead315e43ea0c2ca3491209c6c8db8ce3f2bbe05"
        },
        {
          "name": "92446",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92446"
        },
        {
          "name": "GLSA-201609-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201609-01"
        },
        {
          "name": "[oss-security] 20160817 Re: CVE request Qemu: an infinite loop during packet fragmentation",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/08/18/7"
        },
        {
          "name": "[qemu-devel] 20160809 [PULL 1/3] net: check fragment length during fragmentation",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg01601.html"
        },
        {
          "name": "[oss-security] 20160812 CVE request Qemu: an infinite loop during packet fragmentation",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/08/11/8"
        },
        {
          "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-6834",
    "datePublished": "2016-12-10T00:00:00",
    "dateReserved": "2016-08-17T00:00:00",
    "dateUpdated": "2024-08-06T01:43:37.903Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-7093 (GCVE-0-2016-7093)

Vulnerability from cvelistv5

Published

2016-09-21 14:00

Modified

2024-08-06 01:50

Severity ?

CWE

Summary

Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation.

References

►

URL

Tags

	http://xenbits.xen.org/xsa/advisory-186.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/92865	vdb-entry, x_refsource_BID
	http://xenbits.xen.org/xsa/xsa186-0001-x86-emulate-Correct-boundary-interactions-of-emulate.patch	x_refsource_CONFIRM
	http://support.citrix.com/article/CTX216071	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1036752	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201611-09	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:50:47.500Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xenbits.xen.org/xsa/advisory-186.html"
          },
          {
            "name": "92865",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92865"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xenbits.xen.org/xsa/xsa186-0001-x86-emulate-Correct-boundary-interactions-of-emulate.patch"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.citrix.com/article/CTX216071"
          },
          {
            "name": "1036752",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036752"
          },
          {
            "name": "GLSA-201611-09",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201611-09"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-09-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xenbits.xen.org/xsa/advisory-186.html"
        },
        {
          "name": "92865",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92865"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xenbits.xen.org/xsa/xsa186-0001-x86-emulate-Correct-boundary-interactions-of-emulate.patch"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.citrix.com/article/CTX216071"
        },
        {
          "name": "1036752",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036752"
        },
        {
          "name": "GLSA-201611-09",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201611-09"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-7093",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Xen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor memory and consequently gain host OS privileges by leveraging mishandling of instruction pointer truncation during emulation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://xenbits.xen.org/xsa/advisory-186.html",
              "refsource": "CONFIRM",
              "url": "http://xenbits.xen.org/xsa/advisory-186.html"
            },
            {
              "name": "92865",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92865"
            },
            {
              "name": "http://xenbits.xen.org/xsa/xsa186-0001-x86-emulate-Correct-boundary-interactions-of-emulate.patch",
              "refsource": "CONFIRM",
              "url": "http://xenbits.xen.org/xsa/xsa186-0001-x86-emulate-Correct-boundary-interactions-of-emulate.patch"
            },
            {
              "name": "http://support.citrix.com/article/CTX216071",
              "refsource": "CONFIRM",
              "url": "http://support.citrix.com/article/CTX216071"
            },
            {
              "name": "1036752",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036752"
            },
            {
              "name": "GLSA-201611-09",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201611-09"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-7093",
    "datePublished": "2016-09-21T14:00:00",
    "dateReserved": "2016-08-25T00:00:00",
    "dateUpdated": "2024-08-06T01:50:47.500Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-7094 (GCVE-0-2016-7094)

Vulnerability from cvelistv5

Published

2016-09-21 14:00

Modified

2024-08-06 01:50

Severity ?

CWE

Summary

Buffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial of service via a pagetable update.

References

►

URL

Tags

	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
	http://www.debian.org/security/2016/dsa-3663	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/92864	vdb-entry, x_refsource_BID
	http://xenbits.xen.org/xsa/advisory-187.html	x_refsource_CONFIRM
	http://support.citrix.com/article/CTX216071	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1036753	vdb-entry, x_refsource_SECTRACK
	https://security.gentoo.org/glsa/201611-09	vendor-advisory, x_refsource_GENTOO
	http://xenbits.xen.org/xsa/xsa187-0001-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:50:47.498Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "name": "DSA-3663",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3663"
          },
          {
            "name": "92864",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92864"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xenbits.xen.org/xsa/advisory-187.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.citrix.com/article/CTX216071"
          },
          {
            "name": "1036753",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036753"
          },
          {
            "name": "GLSA-201611-09",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201611-09"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xenbits.xen.org/xsa/xsa187-0001-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-09-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial of service via a pagetable update."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "name": "DSA-3663",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3663"
        },
        {
          "name": "92864",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92864"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xenbits.xen.org/xsa/advisory-187.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.citrix.com/article/CTX216071"
        },
        {
          "name": "1036753",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036753"
        },
        {
          "name": "GLSA-201611-09",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201611-09"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xenbits.xen.org/xsa/xsa187-0001-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-7094",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in Xen 4.7.x and earlier allows local x86 HVM guest OS administrators on guests running with shadow paging to cause a denial of service via a pagetable update."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
            },
            {
              "name": "DSA-3663",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3663"
            },
            {
              "name": "92864",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92864"
            },
            {
              "name": "http://xenbits.xen.org/xsa/advisory-187.html",
              "refsource": "CONFIRM",
              "url": "http://xenbits.xen.org/xsa/advisory-187.html"
            },
            {
              "name": "http://support.citrix.com/article/CTX216071",
              "refsource": "CONFIRM",
              "url": "http://support.citrix.com/article/CTX216071"
            },
            {
              "name": "1036753",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036753"
            },
            {
              "name": "GLSA-201611-09",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201611-09"
            },
            {
              "name": "http://xenbits.xen.org/xsa/xsa187-0001-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch",
              "refsource": "CONFIRM",
              "url": "http://xenbits.xen.org/xsa/xsa187-0001-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-7094",
    "datePublished": "2016-09-21T14:00:00",
    "dateReserved": "2016-08-25T00:00:00",
    "dateUpdated": "2024-08-06T01:50:47.498Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-7092 (GCVE-0-2016-7092)

Vulnerability from cvelistv5

Published

2016-09-21 14:00

Modified

2024-08-06 01:50

Severity ?

CWE

Summary

The get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS administrators to gain host OS privileges via vectors related to L3 recursive pagetables.

References

►

URL

Tags

	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
	http://xenbits.xen.org/xsa/xsa185.patch	x_refsource_CONFIRM
	http://www.debian.org/security/2016/dsa-3663	vendor-advisory, x_refsource_DEBIAN
	http://www.securityfocus.com/bid/92862	vdb-entry, x_refsource_BID
	http://support.citrix.com/article/CTX216071	x_refsource_CONFIRM
	http://xenbits.xen.org/xsa/advisory-185.html	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201611-09	vendor-advisory, x_refsource_GENTOO
	http://www.securitytracker.com/id/1036751	vdb-entry, x_refsource_SECTRACK

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:50:47.440Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xenbits.xen.org/xsa/xsa185.patch"
          },
          {
            "name": "DSA-3663",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3663"
          },
          {
            "name": "92862",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92862"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.citrix.com/article/CTX216071"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xenbits.xen.org/xsa/advisory-185.html"
          },
          {
            "name": "GLSA-201611-09",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201611-09"
          },
          {
            "name": "1036751",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036751"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-09-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS administrators to gain host OS privileges via vectors related to L3 recursive pagetables."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xenbits.xen.org/xsa/xsa185.patch"
        },
        {
          "name": "DSA-3663",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3663"
        },
        {
          "name": "92862",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92862"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.citrix.com/article/CTX216071"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xenbits.xen.org/xsa/advisory-185.html"
        },
        {
          "name": "GLSA-201611-09",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201611-09"
        },
        {
          "name": "1036751",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036751"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-7092",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS administrators to gain host OS privileges via vectors related to L3 recursive pagetables."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
            },
            {
              "name": "http://xenbits.xen.org/xsa/xsa185.patch",
              "refsource": "CONFIRM",
              "url": "http://xenbits.xen.org/xsa/xsa185.patch"
            },
            {
              "name": "DSA-3663",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3663"
            },
            {
              "name": "92862",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92862"
            },
            {
              "name": "http://support.citrix.com/article/CTX216071",
              "refsource": "CONFIRM",
              "url": "http://support.citrix.com/article/CTX216071"
            },
            {
              "name": "http://xenbits.xen.org/xsa/advisory-185.html",
              "refsource": "CONFIRM",
              "url": "http://xenbits.xen.org/xsa/advisory-185.html"
            },
            {
              "name": "GLSA-201611-09",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201611-09"
            },
            {
              "name": "1036751",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036751"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-7092",
    "datePublished": "2016-09-21T14:00:00",
    "dateReserved": "2016-08-25T00:00:00",
    "dateUpdated": "2024-08-06T01:50:47.440Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-6259 (GCVE-0-2016-6259)

Vulnerability from cvelistv5

Published

2016-08-02 16:00

Modified

2024-08-06 01:22

Severity ?

CWE

Summary

Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bit PV guest OS kernels to cause a denial of service (hypervisor and VM crash) by triggering a safety check.

References

►

URL

Tags

	http://www.securityfocus.com/bid/92130	vdb-entry, x_refsource_BID
	http://support.citrix.com/article/CTX214954	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1036447	vdb-entry, x_refsource_SECTRACK
	http://xenbits.xen.org/xsa/xsa183-unstable.patch	x_refsource_CONFIRM
	http://xenbits.xen.org/xsa/advisory-183.html	x_refsource_CONFIRM
	http://xenbits.xen.org/xsa/xsa183-4.6.patch	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:22:20.659Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "92130",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92130"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.citrix.com/article/CTX214954"
          },
          {
            "name": "1036447",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036447"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xenbits.xen.org/xsa/xsa183-unstable.patch"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xenbits.xen.org/xsa/advisory-183.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xenbits.xen.org/xsa/xsa183-4.6.patch"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-07-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bit PV guest OS kernels to cause a denial of service (hypervisor and VM crash) by triggering a safety check."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-08-02T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "92130",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92130"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.citrix.com/article/CTX214954"
        },
        {
          "name": "1036447",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036447"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xenbits.xen.org/xsa/xsa183-unstable.patch"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xenbits.xen.org/xsa/advisory-183.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xenbits.xen.org/xsa/xsa183-4.6.patch"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-6259",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Xen 4.5.x through 4.7.x do not implement Supervisor Mode Access Prevention (SMAP) whitelisting in 32-bit exception and event delivery, which allows local 32-bit PV guest OS kernels to cause a denial of service (hypervisor and VM crash) by triggering a safety check."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "92130",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92130"
            },
            {
              "name": "http://support.citrix.com/article/CTX214954",
              "refsource": "CONFIRM",
              "url": "http://support.citrix.com/article/CTX214954"
            },
            {
              "name": "1036447",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036447"
            },
            {
              "name": "http://xenbits.xen.org/xsa/xsa183-unstable.patch",
              "refsource": "CONFIRM",
              "url": "http://xenbits.xen.org/xsa/xsa183-unstable.patch"
            },
            {
              "name": "http://xenbits.xen.org/xsa/advisory-183.html",
              "refsource": "CONFIRM",
              "url": "http://xenbits.xen.org/xsa/advisory-183.html"
            },
            {
              "name": "http://xenbits.xen.org/xsa/xsa183-4.6.patch",
              "refsource": "CONFIRM",
              "url": "http://xenbits.xen.org/xsa/xsa183-4.6.patch"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-6259",
    "datePublished": "2016-08-02T16:00:00",
    "dateReserved": "2016-07-20T00:00:00",
    "dateUpdated": "2024-08-06T01:22:20.659Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-6258 (GCVE-0-2016-6258)

Vulnerability from cvelistv5

Published

2016-08-02 16:00

Modified

2024-08-06 01:22

Severity ?

CWE

Summary

The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS administrators to gain host OS privileges by leveraging fast-paths for updating pagetable entries.

References

►

URL

Tags

	http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html	x_refsource_CONFIRM
	http://xenbits.xen.org/xsa/advisory-182.html	x_refsource_CONFIRM
	http://xenbits.xen.org/xsa/xsa182-4.6.patch	x_refsource_CONFIRM
	http://support.citrix.com/article/CTX214954	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201611-09	vendor-advisory, x_refsource_GENTOO
	http://xenbits.xen.org/xsa/xsa182-unstable.patch	x_refsource_CONFIRM
	http://xenbits.xen.org/xsa/xsa182-4.5.patch	x_refsource_CONFIRM
	http://www.debian.org/security/2016/dsa-3633	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1036446	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/92131	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:22:20.664Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xenbits.xen.org/xsa/advisory-182.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xenbits.xen.org/xsa/xsa182-4.6.patch"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.citrix.com/article/CTX214954"
          },
          {
            "name": "GLSA-201611-09",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201611-09"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xenbits.xen.org/xsa/xsa182-unstable.patch"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xenbits.xen.org/xsa/xsa182-4.5.patch"
          },
          {
            "name": "DSA-3633",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2016/dsa-3633"
          },
          {
            "name": "1036446",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1036446"
          },
          {
            "name": "92131",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92131"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-07-26T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS administrators to gain host OS privileges by leveraging fast-paths for updating pagetable entries."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-06-30T16:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xenbits.xen.org/xsa/advisory-182.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xenbits.xen.org/xsa/xsa182-4.6.patch"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.citrix.com/article/CTX214954"
        },
        {
          "name": "GLSA-201611-09",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201611-09"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xenbits.xen.org/xsa/xsa182-unstable.patch"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xenbits.xen.org/xsa/xsa182-4.5.patch"
        },
        {
          "name": "DSA-3633",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2016/dsa-3633"
        },
        {
          "name": "1036446",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1036446"
        },
        {
          "name": "92131",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92131"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-6258",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The PV pagetable code in arch/x86/mm.c in Xen 4.7.x and earlier allows local 32-bit PV guest OS administrators to gain host OS privileges by leveraging fast-paths for updating pagetable entries."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html",
              "refsource": "CONFIRM",
              "url": "http://www.oracle.com/technetwork/topics/security/ovmbulletinjul2016-3090546.html"
            },
            {
              "name": "http://xenbits.xen.org/xsa/advisory-182.html",
              "refsource": "CONFIRM",
              "url": "http://xenbits.xen.org/xsa/advisory-182.html"
            },
            {
              "name": "http://xenbits.xen.org/xsa/xsa182-4.6.patch",
              "refsource": "CONFIRM",
              "url": "http://xenbits.xen.org/xsa/xsa182-4.6.patch"
            },
            {
              "name": "http://support.citrix.com/article/CTX214954",
              "refsource": "CONFIRM",
              "url": "http://support.citrix.com/article/CTX214954"
            },
            {
              "name": "GLSA-201611-09",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201611-09"
            },
            {
              "name": "http://xenbits.xen.org/xsa/xsa182-unstable.patch",
              "refsource": "CONFIRM",
              "url": "http://xenbits.xen.org/xsa/xsa182-unstable.patch"
            },
            {
              "name": "http://xenbits.xen.org/xsa/xsa182-4.5.patch",
              "refsource": "CONFIRM",
              "url": "http://xenbits.xen.org/xsa/xsa182-4.5.patch"
            },
            {
              "name": "DSA-3633",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2016/dsa-3633"
            },
            {
              "name": "1036446",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1036446"
            },
            {
              "name": "92131",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/92131"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-6258",
    "datePublished": "2016-08-02T16:00:00",
    "dateReserved": "2016-07-20T00:00:00",
    "dateUpdated": "2024-08-06T01:22:20.664Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-6833 (GCVE-0-2016-6833)

Vulnerability from cvelistv5

Published

2016-12-10 00:00

Modified

2024-08-06 01:43

Severity ?

CWE

Summary

Use-after-free vulnerability in the vmxnet3_io_bar0_write function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU instance crash) by leveraging failure to check if the device is active.

References

►

URL

Tags

	http://www.securityfocus.com/bid/93255	vdb-entry, x_refsource_BID
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/08/12/1	mailing-list, x_refsource_MLIST
	https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg01602.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201609-01	vendor-advisory, x_refsource_GENTOO
	http://www.openwall.com/lists/oss-security/2016/08/18/3	mailing-list, x_refsource_MLIST
	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=6c352ca9b4ee3e1e286ea9e8434bd8e69ac7d0d8	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:43:37.851Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "93255",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/93255"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "[oss-security] 20160812 CVE request: Qemu net: vmxnet3: use after free while writing",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/08/12/1"
          },
          {
            "name": "[qemu-devel] 20160809 [PULL 2/3] net: vmxnet3: check for device_active before write",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg01602.html"
          },
          {
            "name": "GLSA-201609-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201609-01"
          },
          {
            "name": "[oss-security] 20160817 Re: CVE request: Qemu net: vmxnet3: use after free while writing",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/08/18/3"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=6c352ca9b4ee3e1e286ea9e8434bd8e69ac7d0d8"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Use-after-free vulnerability in the vmxnet3_io_bar0_write function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (QEMU instance crash) by leveraging failure to check if the device is active."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "93255",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/93255"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "[oss-security] 20160812 CVE request: Qemu net: vmxnet3: use after free while writing",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/08/12/1"
        },
        {
          "name": "[qemu-devel] 20160809 [PULL 2/3] net: vmxnet3: check for device_active before write",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg01602.html"
        },
        {
          "name": "GLSA-201609-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201609-01"
        },
        {
          "name": "[oss-security] 20160817 Re: CVE request: Qemu net: vmxnet3: use after free while writing",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/08/18/3"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=6c352ca9b4ee3e1e286ea9e8434bd8e69ac7d0d8"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-6833",
    "datePublished": "2016-12-10T00:00:00",
    "dateReserved": "2016-08-17T00:00:00",
    "dateUpdated": "2024-08-06T01:43:37.851Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-6836 (GCVE-0-2016-6836)

Vulnerability from cvelistv5

Published

2016-12-10 00:00

Modified

2024-08-06 01:43

Severity ?

CWE

Summary

The vmxnet3_complete_packet function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host memory information by leveraging failure to initialize the txcq_descr object.

References

►

URL

Tags

	http://www.securityfocus.com/bid/92444	vdb-entry, x_refsource_BID
	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=fdda170e50b8af062cf5741e12c4fb5e57a2eacf	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/08/11/5	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/08/18/5	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201609-01	vendor-advisory, x_refsource_GENTOO
	https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg02108.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:43:37.990Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "92444",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/92444"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=fdda170e50b8af062cf5741e12c4fb5e57a2eacf"
          },
          {
            "name": "[oss-security] 20160812 CVE Request Qemu: Information leak in vmxnet3_complete_packet",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/08/11/5"
          },
          {
            "name": "[oss-security] 20160817 Re: CVE Request Qemu: Information leak in vmxnet3_complete_packet",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/08/18/5"
          },
          {
            "name": "GLSA-201609-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201609-01"
          },
          {
            "name": "[qemu-devel] 20160811 [PATCH] net: vmxnet: initialise local tx descriptor",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg02108.html"
          },
          {
            "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-11T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The vmxnet3_complete_packet function in hw/net/vmxnet3.c in QEMU (aka Quick Emulator) allows local guest OS administrators to obtain sensitive host memory information by leveraging failure to initialize the txcq_descr object."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-12-01T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "92444",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/92444"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=fdda170e50b8af062cf5741e12c4fb5e57a2eacf"
        },
        {
          "name": "[oss-security] 20160812 CVE Request Qemu: Information leak in vmxnet3_complete_packet",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/08/11/5"
        },
        {
          "name": "[oss-security] 20160817 Re: CVE Request Qemu: Information leak in vmxnet3_complete_packet",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/08/18/5"
        },
        {
          "name": "GLSA-201609-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201609-01"
        },
        {
          "name": "[qemu-devel] 20160811 [PATCH] net: vmxnet: initialise local tx descriptor",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-08/msg02108.html"
        },
        {
          "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-6836",
    "datePublished": "2016-12-10T00:00:00",
    "dateReserved": "2016-08-17T00:00:00",
    "dateUpdated": "2024-08-06T01:43:37.990Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-6835 (GCVE-0-2016-6835)

Vulnerability from cvelistv5

Published

2016-12-10 00:00

Modified

2024-08-06 01:43

Severity ?

CWE

Summary

The vmxnet_tx_pkt_parse_headers function in hw/net/vmxnet_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (buffer over-read) by leveraging failure to check IP header length.

References

►

URL

Tags

	https://lists.gnu.org/archive/html/qemu-stable/2016-08/msg00077.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/08/11/7	mailing-list, x_refsource_MLIST
	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=93060258ae748573ca7197204125a2670047896d	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2016/08/18/4	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:2392	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T01:43:37.918Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[qemu-devel] 20160810 Re: [PATCH] net: vmxnet: check IP header length",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-stable/2016-08/msg00077.html"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "[oss-security] 20160812 CVE request Qemu: buffer overflow in vmxnet_tx_pkt_parse_headers() in vmxnet3 device emulation",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/08/11/7"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=93060258ae748573ca7197204125a2670047896d"
          },
          {
            "name": "[oss-security] 20160817 Re: CVE request Qemu: buffer overflow in vmxnet_tx_pkt_parse_headers() in vmxnet3 device emulation",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/08/18/4"
          },
          {
            "name": "RHSA-2017:2392",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2392"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-08-10T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The vmxnet_tx_pkt_parse_headers function in hw/net/vmxnet_tx_pkt.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (buffer over-read) by leveraging failure to check IP header length."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[qemu-devel] 20160810 Re: [PATCH] net: vmxnet: check IP header length",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-stable/2016-08/msg00077.html"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "[oss-security] 20160812 CVE request Qemu: buffer overflow in vmxnet_tx_pkt_parse_headers() in vmxnet3 device emulation",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/08/11/7"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=93060258ae748573ca7197204125a2670047896d"
        },
        {
          "name": "[oss-security] 20160817 Re: CVE request Qemu: buffer overflow in vmxnet_tx_pkt_parse_headers() in vmxnet3 device emulation",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/08/18/4"
        },
        {
          "name": "RHSA-2017:2392",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2392"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-6835",
    "datePublished": "2016-12-10T00:00:00",
    "dateReserved": "2016-08-17T00:00:00",
    "dateUpdated": "2024-08-06T01:43:37.918Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2016:2473-1

Vulnerability from csaf_suse

CVE-2016-6888 (GCVE-0-2016-6888)

Vulnerability from cvelistv5

CVE-2016-6834 (GCVE-0-2016-6834)

Vulnerability from cvelistv5

CVE-2016-7093 (GCVE-0-2016-7093)

Vulnerability from cvelistv5

CVE-2016-7094 (GCVE-0-2016-7094)

Vulnerability from cvelistv5

CVE-2016-7092 (GCVE-0-2016-7092)

Vulnerability from cvelistv5

CVE-2016-6259 (GCVE-0-2016-6259)

Vulnerability from cvelistv5

CVE-2016-6258 (GCVE-0-2016-6258)

Vulnerability from cvelistv5

CVE-2016-6833 (GCVE-0-2016-6833)

Vulnerability from cvelistv5

CVE-2016-6836 (GCVE-0-2016-6836)

Vulnerability from cvelistv5

CVE-2016-6835 (GCVE-0-2016-6835)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature