csaf_suse - suse-su-2017:0718-1

suse-su-2017:0718-1

Vulnerability from csaf_suse

Published

2017-03-17 07:43

Modified

2017-03-17 07:43

Summary

Security update for xen

Notes

Title of the patch

Security update for xen

Description of the patch

This update for xen fixes several issues. These security issues were fixed: - CVE-2016-10155: The virtual hardware watchdog 'wdt_i6300esb' was vulnerable to a memory leakage issue allowing a privileged user to cause a DoS and/or potentially crash the Qemu process on the host (bsc#1024183) - CVE-2017-2620: In CIRRUS_BLTMODE_MEMSYSSRC mode the bitblit copy routine cirrus_bitblt_cputovideo failed to check the memory region, allowing for an out-of-bounds write that allows for privilege escalation (bsc#1024834) - CVE-2017-2615: An error in the bitblt copy operation could have allowed a malicious guest administrator to cause an out of bounds memory access, possibly leading to information disclosure or privilege escalation (bsc#1023004) - CVE-2014-8106: A heap-based buffer overflow in the Cirrus VGA emulator allowed local guest users to execute arbitrary code via vectors related to blit regions (bsc#907805) - CVE-2016-9911: The USB EHCI Emulation support was vulnerable to a memory leakage issue while processing packet data in 'ehci_init_transfer'. A guest user/process could have used this issue to leak host memory, resulting in DoS for the host (bsc#1014507) - CVE-2016-9921: The Cirrus CLGD 54xx VGA Emulator support was vulnerable to a divide by zero issue while copying VGA data. A privileged user inside guest could have used this flaw to crash the process instance on the host, resulting in DoS (bsc#1015169) - CVE-2016-9922: The Cirrus CLGD 54xx VGA Emulator support was vulnerable to a divide by zero issue while copying VGA data. A privileged user inside guest could have used this flaw to crash the process instance on the host, resulting in DoS (bsc#1015169) - CVE-2016-10013: Xen allowed local 64-bit x86 HVM guest OS users to gain privileges by leveraging mishandling of SYSCALL singlestep during emulation (bsc#1016340). - CVE-2016-9932: CMPXCHG8B emulation on x86 systems allowed local HVM guest OS users to obtain sensitive information from host stack memory via a 'supposedly-ignored' operand size prefix (bsc#1012651). - CVE-2016-9101: A memory leak in hw/net/eepro100.c allowed local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by repeatedly unplugging an i8255x (PRO100) NIC device (bsc#1013668) - CVE-2016-9776: The ColdFire Fast Ethernet Controller emulator support was vulnerable to an infinite loop issue while receiving packets in 'mcf_fec_receive'. A privileged user/process inside guest could have used this issue to crash the Qemu process on the host leading to DoS (bsc#1013657) - A malicious guest could have, by frequently rebooting over extended periods of time, run the host system out of memory, resulting in a Denial of Service (DoS) (bsc#1022871) - CVE-2016-10024: Xen allowed local x86 PV guest OS kernel administrators to cause a denial of service (host hang or crash) by modifying the instruction stream asynchronously while performing certain kernel operations (bsc#1014298) This non-security issue was fixed: - bsc#1002496: Added support for reloading clvm in block-dmmd block-dmmd

Patchnames

sleclo50sp3-xen-13030,sleman21-xen-13030,slemap21-xen-13030,sleposp3-xen-13030,slessp3-xen-13030

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for xen",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "\nThis update for xen fixes several issues.\n\nThese security issues were fixed:\n\n- CVE-2016-10155: The virtual hardware watchdog \u0027wdt_i6300esb\u0027 was vulnerable to a memory leakage issue allowing a privileged user to cause a DoS and/or potentially crash the Qemu process on the host (bsc#1024183)\n- CVE-2017-2620: In CIRRUS_BLTMODE_MEMSYSSRC mode the bitblit copy routine cirrus_bitblt_cputovideo failed to check the memory region, allowing for an out-of-bounds write that allows for privilege escalation (bsc#1024834)\n- CVE-2017-2615: An error in the bitblt copy operation could have allowed a malicious guest administrator to cause an out of bounds memory access, possibly leading to information disclosure or privilege escalation (bsc#1023004)\n- CVE-2014-8106: A heap-based buffer overflow in the Cirrus VGA emulator allowed local guest users to execute arbitrary code via vectors related to blit regions (bsc#907805)\n- CVE-2016-9911: The USB EHCI Emulation support was vulnerable to a memory leakage issue while processing packet data in \u0027ehci_init_transfer\u0027. A guest user/process could have used this issue to leak host memory, resulting in DoS for the host (bsc#1014507)\n- CVE-2016-9921: The Cirrus CLGD 54xx VGA Emulator support was vulnerable to a divide by zero issue while copying VGA data. A privileged user inside guest could have used this flaw to crash the process instance on the host, resulting in DoS (bsc#1015169)\n- CVE-2016-9922: The Cirrus CLGD 54xx VGA Emulator support was vulnerable to a divide by zero issue while copying VGA data. A privileged user inside guest could have used this flaw to crash the process instance on the host, resulting in DoS (bsc#1015169)\n- CVE-2016-10013: Xen allowed local 64-bit x86 HVM guest OS users to gain privileges by leveraging mishandling of SYSCALL singlestep during emulation (bsc#1016340).\n- CVE-2016-9932: CMPXCHG8B emulation on x86 systems allowed local HVM guest OS users to obtain sensitive information from host stack memory via a \u0027supposedly-ignored\u0027 operand size prefix (bsc#1012651).\n- CVE-2016-9101: A memory leak in hw/net/eepro100.c allowed local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by repeatedly unplugging an i8255x (PRO100) NIC device (bsc#1013668)\n- CVE-2016-9776: The ColdFire Fast Ethernet Controller emulator support was vulnerable to an infinite loop issue while receiving packets in \u0027mcf_fec_receive\u0027. A privileged user/process inside guest could have used this issue to crash the Qemu process on the host leading to DoS (bsc#1013657)\n- A malicious guest could have, by frequently rebooting over extended periods of time, run the host system out of memory, resulting in a Denial of Service (DoS) (bsc#1022871)\n- CVE-2016-10024: Xen allowed local x86 PV guest OS kernel administrators to cause a denial of service (host hang or crash) by modifying the instruction stream asynchronously while performing certain kernel operations (bsc#1014298)\n\nThis non-security issue was fixed:\n\n- bsc#1002496: Added support for reloading clvm in block-dmmd block-dmmd\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "sleclo50sp3-xen-13030,sleman21-xen-13030,slemap21-xen-13030,sleposp3-xen-13030,slessp3-xen-13030",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2017_0718-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2017:0718-1",
        "url": "https://www.suse.com/support/update/announcement/2017/suse-su-20170718-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2017:0718-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2017-March/002705.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1002496",
        "url": "https://bugzilla.suse.com/1002496"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1012651",
        "url": "https://bugzilla.suse.com/1012651"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1013657",
        "url": "https://bugzilla.suse.com/1013657"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1013668",
        "url": "https://bugzilla.suse.com/1013668"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1014298",
        "url": "https://bugzilla.suse.com/1014298"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1014507",
        "url": "https://bugzilla.suse.com/1014507"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1015169",
        "url": "https://bugzilla.suse.com/1015169"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1016340",
        "url": "https://bugzilla.suse.com/1016340"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1022871",
        "url": "https://bugzilla.suse.com/1022871"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1023004",
        "url": "https://bugzilla.suse.com/1023004"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1024183",
        "url": "https://bugzilla.suse.com/1024183"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1024834",
        "url": "https://bugzilla.suse.com/1024834"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 907805",
        "url": "https://bugzilla.suse.com/907805"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2014-8106 page",
        "url": "https://www.suse.com/security/cve/CVE-2014-8106/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-10013 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-10013/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-10024 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-10024/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-10155 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-10155/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-9101 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-9101/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-9776 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-9776/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-9911 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-9911/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-9921 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-9921/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-9922 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-9922/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2016-9932 page",
        "url": "https://www.suse.com/security/cve/CVE-2016-9932/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-2615 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-2615/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2017-2620 page",
        "url": "https://www.suse.com/security/cve/CVE-2017-2620/"
      }
    ],
    "title": "Security update for xen",
    "tracking": {
      "current_release_date": "2017-03-17T07:43:02Z",
      "generator": {
        "date": "2017-03-17T07:43:02Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2017:0718-1",
      "initial_release_date": "2017-03-17T07:43:02Z",
      "revision_history": [
        {
          "date": "2017-03-17T07:43:02Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
                "product": {
                  "name": "xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
                  "product_id": "xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
                "product": {
                  "name": "xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
                  "product_id": "xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "xen-libs-4.2.5_21-35.1.i586",
                "product": {
                  "name": "xen-libs-4.2.5_21-35.1.i586",
                  "product_id": "xen-libs-4.2.5_21-35.1.i586"
                }
              },
              {
                "category": "product_version",
                "name": "xen-tools-domU-4.2.5_21-35.1.i586",
                "product": {
                  "name": "xen-tools-domU-4.2.5_21-35.1.i586",
                  "product_id": "xen-tools-domU-4.2.5_21-35.1.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xen-4.2.5_21-35.1.x86_64",
                "product": {
                  "name": "xen-4.2.5_21-35.1.x86_64",
                  "product_id": "xen-4.2.5_21-35.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-doc-html-4.2.5_21-35.1.x86_64",
                "product": {
                  "name": "xen-doc-html-4.2.5_21-35.1.x86_64",
                  "product_id": "xen-doc-html-4.2.5_21-35.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-doc-pdf-4.2.5_21-35.1.x86_64",
                "product": {
                  "name": "xen-doc-pdf-4.2.5_21-35.1.x86_64",
                  "product_id": "xen-doc-pdf-4.2.5_21-35.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
                "product": {
                  "name": "xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
                  "product_id": "xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-libs-4.2.5_21-35.1.x86_64",
                "product": {
                  "name": "xen-libs-4.2.5_21-35.1.x86_64",
                  "product_id": "xen-libs-4.2.5_21-35.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-libs-32bit-4.2.5_21-35.1.x86_64",
                "product": {
                  "name": "xen-libs-32bit-4.2.5_21-35.1.x86_64",
                  "product_id": "xen-libs-32bit-4.2.5_21-35.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-tools-4.2.5_21-35.1.x86_64",
                "product": {
                  "name": "xen-tools-4.2.5_21-35.1.x86_64",
                  "product_id": "xen-tools-4.2.5_21-35.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-tools-domU-4.2.5_21-35.1.x86_64",
                "product": {
                  "name": "xen-tools-domU-4.2.5_21-35.1.x86_64",
                  "product_id": "xen-tools-domU-4.2.5_21-35.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE OpenStack Cloud 5",
                "product": {
                  "name": "SUSE OpenStack Cloud 5",
                  "product_id": "SUSE OpenStack Cloud 5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:cloud:5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager 2.1",
                "product": {
                  "name": "SUSE Manager 2.1",
                  "product_id": "SUSE Manager 2.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-manager-server:2.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Manager Proxy 2.1",
                "product": {
                  "name": "SUSE Manager Proxy 2.1",
                  "product_id": "SUSE Manager Proxy 2.1",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse-manager-proxy:2.1"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Point of Sale 11 SP3",
                "product": {
                  "name": "SUSE Linux Enterprise Point of Sale 11 SP3",
                  "product_id": "SUSE Linux Enterprise Point of Sale 11 SP3",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-pos:11:sp3"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 11 SP3-LTSS",
                "product": {
                  "name": "SUSE Linux Enterprise Server 11 SP3-LTSS",
                  "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:suse_sles_ltss:11:sp3"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-4.2.5_21-35.1.x86_64 as component of SUSE OpenStack Cloud 5",
          "product_id": "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-doc-html-4.2.5_21-35.1.x86_64 as component of SUSE OpenStack Cloud 5",
          "product_id": "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-doc-html-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-doc-pdf-4.2.5_21-35.1.x86_64 as component of SUSE OpenStack Cloud 5",
          "product_id": "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-doc-pdf-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64 as component of SUSE OpenStack Cloud 5",
          "product_id": "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64"
        },
        "product_reference": "xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-4.2.5_21-35.1.x86_64 as component of SUSE OpenStack Cloud 5",
          "product_id": "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-libs-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-32bit-4.2.5_21-35.1.x86_64 as component of SUSE OpenStack Cloud 5",
          "product_id": "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-libs-32bit-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-tools-4.2.5_21-35.1.x86_64 as component of SUSE OpenStack Cloud 5",
          "product_id": "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-tools-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-tools-domU-4.2.5_21-35.1.x86_64 as component of SUSE OpenStack Cloud 5",
          "product_id": "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-tools-domU-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE OpenStack Cloud 5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-4.2.5_21-35.1.x86_64 as component of SUSE Manager 2.1",
          "product_id": "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE Manager 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-doc-html-4.2.5_21-35.1.x86_64 as component of SUSE Manager 2.1",
          "product_id": "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-doc-html-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE Manager 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-doc-pdf-4.2.5_21-35.1.x86_64 as component of SUSE Manager 2.1",
          "product_id": "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-doc-pdf-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE Manager 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64 as component of SUSE Manager 2.1",
          "product_id": "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64"
        },
        "product_reference": "xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
        "relates_to_product_reference": "SUSE Manager 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-4.2.5_21-35.1.x86_64 as component of SUSE Manager 2.1",
          "product_id": "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-libs-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE Manager 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-32bit-4.2.5_21-35.1.x86_64 as component of SUSE Manager 2.1",
          "product_id": "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-libs-32bit-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE Manager 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-tools-4.2.5_21-35.1.x86_64 as component of SUSE Manager 2.1",
          "product_id": "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-tools-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE Manager 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-tools-domU-4.2.5_21-35.1.x86_64 as component of SUSE Manager 2.1",
          "product_id": "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-tools-domU-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE Manager 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-4.2.5_21-35.1.x86_64 as component of SUSE Manager Proxy 2.1",
          "product_id": "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Proxy 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-doc-html-4.2.5_21-35.1.x86_64 as component of SUSE Manager Proxy 2.1",
          "product_id": "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-doc-html-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Proxy 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-doc-pdf-4.2.5_21-35.1.x86_64 as component of SUSE Manager Proxy 2.1",
          "product_id": "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-doc-pdf-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Proxy 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64 as component of SUSE Manager Proxy 2.1",
          "product_id": "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64"
        },
        "product_reference": "xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Proxy 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-4.2.5_21-35.1.x86_64 as component of SUSE Manager Proxy 2.1",
          "product_id": "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-libs-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Proxy 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-32bit-4.2.5_21-35.1.x86_64 as component of SUSE Manager Proxy 2.1",
          "product_id": "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-libs-32bit-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Proxy 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-tools-4.2.5_21-35.1.x86_64 as component of SUSE Manager Proxy 2.1",
          "product_id": "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-tools-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Proxy 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-tools-domU-4.2.5_21-35.1.x86_64 as component of SUSE Manager Proxy 2.1",
          "product_id": "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-tools-domU-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE Manager Proxy 2.1"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
          "product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586"
        },
        "product_reference": "xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
          "product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586"
        },
        "product_reference": "xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-4.2.5_21-35.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
          "product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586"
        },
        "product_reference": "xen-libs-4.2.5_21-35.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-tools-domU-4.2.5_21-35.1.i586 as component of SUSE Linux Enterprise Point of Sale 11 SP3",
          "product_id": "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586"
        },
        "product_reference": "xen-tools-domU-4.2.5_21-35.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Point of Sale 11 SP3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-4.2.5_21-35.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-doc-html-4.2.5_21-35.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-doc-html-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-doc-pdf-4.2.5_21-35.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-doc-pdf-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586"
        },
        "product_reference": "xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64"
        },
        "product_reference": "xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586"
        },
        "product_reference": "xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-4.2.5_21-35.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586"
        },
        "product_reference": "xen-libs-4.2.5_21-35.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-4.2.5_21-35.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-libs-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-32bit-4.2.5_21-35.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-libs-32bit-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-tools-4.2.5_21-35.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-tools-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-tools-domU-4.2.5_21-35.1.i586 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586"
        },
        "product_reference": "xen-tools-domU-4.2.5_21-35.1.i586",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-tools-domU-4.2.5_21-35.1.x86_64 as component of SUSE Linux Enterprise Server 11 SP3-LTSS",
          "product_id": "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64"
        },
        "product_reference": "xen-tools-domU-4.2.5_21-35.1.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 11 SP3-LTSS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-8106",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2014-8106"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU before 2.2.0 allows local guest users to execute arbitrary code via vectors related to blit regions. NOTE: this vulnerability exists because an incomplete fix for CVE-2007-1320.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2014-8106",
          "url": "https://www.suse.com/security/cve/CVE-2014-8106"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1023004 for CVE-2014-8106",
          "url": "https://bugzilla.suse.com/1023004"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2014-8106",
          "url": "https://bugzilla.suse.com/1178658"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 907805 for CVE-2014-8106",
          "url": "https://bugzilla.suse.com/907805"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-03-17T07:43:02Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2014-8106"
    },
    {
      "cve": "CVE-2016-10013",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-10013"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Xen through 4.8.x allows local 64-bit x86 HVM guest OS users to gain privileges by leveraging mishandling of SYSCALL singlestep during emulation.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-10013",
          "url": "https://www.suse.com/security/cve/CVE-2016-10013"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1016340 for CVE-2016-10013",
          "url": "https://bugzilla.suse.com/1016340"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-03-17T07:43:02Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-10013"
    },
    {
      "cve": "CVE-2016-10024",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-10024"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Xen through 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service (host hang or crash) by modifying the instruction stream asynchronously while performing certain kernel operations.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-10024",
          "url": "https://www.suse.com/security/cve/CVE-2016-10024"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1014298 for CVE-2016-10024",
          "url": "https://bugzilla.suse.com/1014298"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2016-10024",
          "url": "https://bugzilla.suse.com/1178658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-03-17T07:43:02Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2016-10024"
    },
    {
      "cve": "CVE-2016-10155",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-10155"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-10155",
          "url": "https://www.suse.com/security/cve/CVE-2016-10155"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1021129 for CVE-2016-10155",
          "url": "https://bugzilla.suse.com/1021129"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1024183 for CVE-2016-10155",
          "url": "https://bugzilla.suse.com/1024183"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-03-17T07:43:02Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-10155"
    },
    {
      "cve": "CVE-2016-9101",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-9101"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Memory leak in hw/net/eepro100.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by repeatedly unplugging an i8255x (PRO100) NIC device.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-9101",
          "url": "https://www.suse.com/security/cve/CVE-2016-9101"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1007391 for CVE-2016-9101",
          "url": "https://bugzilla.suse.com/1007391"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1013668 for CVE-2016-9101",
          "url": "https://bugzilla.suse.com/1013668"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1024181 for CVE-2016-9101",
          "url": "https://bugzilla.suse.com/1024181"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-03-17T07:43:02Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-9101"
    },
    {
      "cve": "CVE-2016-9776",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-9776"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in \u0027mcf_fec_receive\u0027. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading to DoS.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-9776",
          "url": "https://www.suse.com/security/cve/CVE-2016-9776"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1013285 for CVE-2016-9776",
          "url": "https://bugzilla.suse.com/1013285"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1013657 for CVE-2016-9776",
          "url": "https://bugzilla.suse.com/1013657"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1024182 for CVE-2016-9776",
          "url": "https://bugzilla.suse.com/1024182"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2016-9776",
          "url": "https://bugzilla.suse.com/1178658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:C/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-03-17T07:43:02Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-9776"
    },
    {
      "cve": "CVE-2016-9911",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-9911"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Quick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing packet data in \u0027ehci_init_transfer\u0027. A guest user/process could use this issue to leak host memory, resulting in DoS for a host.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-9911",
          "url": "https://www.suse.com/security/cve/CVE-2016-9911"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1014111 for CVE-2016-9911",
          "url": "https://bugzilla.suse.com/1014111"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1014507 for CVE-2016-9911",
          "url": "https://bugzilla.suse.com/1014507"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-03-17T07:43:02Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-9911"
    },
    {
      "cve": "CVE-2016-9921",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-9921"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It could occur while copying VGA data when cirrus graphics mode was set to be VGA. A privileged user inside guest could use this flaw to crash the Qemu process instance on the host, resulting in DoS.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-9921",
          "url": "https://www.suse.com/security/cve/CVE-2016-9921"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1014702 for CVE-2016-9921",
          "url": "https://bugzilla.suse.com/1014702"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1015169 for CVE-2016-9921",
          "url": "https://bugzilla.suse.com/1015169"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2016-9921",
          "url": "https://bugzilla.suse.com/1178658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-03-17T07:43:02Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-9921"
    },
    {
      "cve": "CVE-2016-9922",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-9922"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "The cirrus_do_copy function in hw/display/cirrus_vga.c in QEMU (aka Quick Emulator), when cirrus graphics mode is VGA, allows local guest OS privileged users to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving blit pitch values.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-9922",
          "url": "https://www.suse.com/security/cve/CVE-2016-9922"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1014702 for CVE-2016-9922",
          "url": "https://bugzilla.suse.com/1014702"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1015169 for CVE-2016-9922",
          "url": "https://bugzilla.suse.com/1015169"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2016-9922",
          "url": "https://bugzilla.suse.com/1178658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-03-17T07:43:02Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-9922"
    },
    {
      "cve": "CVE-2016-9932",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2016-9932"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a \"supposedly-ignored\" operand size prefix.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2016-9932",
          "url": "https://www.suse.com/security/cve/CVE-2016-9932"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1012651 for CVE-2016-9932",
          "url": "https://bugzilla.suse.com/1012651"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1016340 for CVE-2016-9932",
          "url": "https://bugzilla.suse.com/1016340"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.3,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-03-17T07:43:02Z",
          "details": "low"
        }
      ],
      "title": "CVE-2016-9932"
    },
    {
      "cve": "CVE-2017-2615",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-2615"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-2615",
          "url": "https://www.suse.com/security/cve/CVE-2017-2615"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1023004 for CVE-2017-2615",
          "url": "https://bugzilla.suse.com/1023004"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2017-2615",
          "url": "https://bugzilla.suse.com/1178658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-03-17T07:43:02Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-2615"
    },
    {
      "cve": "CVE-2017-2620",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2017-2620"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
          "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
          "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2017-2620",
          "url": "https://www.suse.com/security/cve/CVE-2017-2620"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1024834 for CVE-2017-2620",
          "url": "https://bugzilla.suse.com/1024834"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1024972 for CVE-2017-2620",
          "url": "https://bugzilla.suse.com/1024972"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2017-2620",
          "url": "https://bugzilla.suse.com/1178658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.0"
          },
          "products": [
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.96-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.i586",
            "SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.96-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-35.1.x86_64",
            "SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-35.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2017-03-17T07:43:02Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2017-2620"
    }
  ]
}

CVE-2016-9911 (GCVE-0-2016-9911)

Vulnerability from cvelistv5

Published

2016-12-23 22:00

Modified

2024-08-06 03:07

Severity ?

CWE

Summary

Quick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing packet data in 'ehci_init_transfer'. A guest user/process could use this issue to leak host memory, resulting in DoS for a host.

References

►

URL

Tags

	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/94762	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2392	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201701-49	vendor-advisory, x_refsource_GENTOO
	https://access.redhat.com/errata/RHSA-2017:2408	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2016/12/08/5	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:07:31.451Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "94762",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94762"
          },
          {
            "name": "RHSA-2017:2392",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2392"
          },
          {
            "name": "GLSA-201701-49",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-49"
          },
          {
            "name": "RHSA-2017:2408",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2408"
          },
          {
            "name": "[oss-security] 20161208 Re: CVE request: Qemu: usb: ehci: memory leakage in ehci_init_transfer",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/12/08/5"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-12-07T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Quick Emulator (Qemu) built with the USB EHCI Emulation support is vulnerable to a memory leakage issue. It could occur while processing packet data in \u0027ehci_init_transfer\u0027. A guest user/process could use this issue to leak host memory, resulting in DoS for a host."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "94762",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94762"
        },
        {
          "name": "RHSA-2017:2392",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2392"
        },
        {
          "name": "GLSA-201701-49",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-49"
        },
        {
          "name": "RHSA-2017:2408",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2408"
        },
        {
          "name": "[oss-security] 20161208 Re: CVE request: Qemu: usb: ehci: memory leakage in ehci_init_transfer",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/12/08/5"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-9911",
    "datePublished": "2016-12-23T22:00:00",
    "dateReserved": "2016-12-08T00:00:00",
    "dateUpdated": "2024-08-06T03:07:31.451Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-2620 (GCVE-0-2017-2620)

Vulnerability from cvelistv5

Published

2018-07-27 19:00

Modified

2024-08-05 14:02

Severity ?

5.5 (Medium) - CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

CWE

CWE-787

Summary

Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process.

References

►

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2017-0329.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0334.html	vendor-advisory, x_refsource_REDHAT
	http://www.securitytracker.com/id/1037870	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2017-0328.html	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2017-0333.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0351.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0454.html	vendor-advisory, x_refsource_REDHAT
	https://xenbits.xen.org/xsa/advisory-209.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2017-0331.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2620	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2017/02/21/1	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2017-0350.html	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2017-0396.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201704-01	vendor-advisory, x_refsource_GENTOO
	https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04700.html	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2017-0352.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0330.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0332.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/96378	vdb-entry, x_refsource_BID
	https://support.citrix.com/article/CTX220771	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201703-07	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	QEMU	Qemu:	Version: 2.8

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:02:07.311Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:0329",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0329.html"
          },
          {
            "name": "RHSA-2017:0334",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0334.html"
          },
          {
            "name": "1037870",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037870"
          },
          {
            "name": "RHSA-2017:0328",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0328.html"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "RHSA-2017:0333",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0333.html"
          },
          {
            "name": "RHSA-2017:0351",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0351.html"
          },
          {
            "name": "RHSA-2017:0454",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0454.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://xenbits.xen.org/xsa/advisory-209.html"
          },
          {
            "name": "RHSA-2017:0331",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0331.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2620"
          },
          {
            "name": "[oss-security] 20170221 CVE-2017-2620 Qemu: display: cirrus: out-of-bounds access issue while in cirrus_bitblt_cputovideo",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/21/1"
          },
          {
            "name": "RHSA-2017:0350",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0350.html"
          },
          {
            "name": "[debian-lts-announce] 20180206 [SECURITY] [DLA 1270-1] xen security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html"
          },
          {
            "name": "RHSA-2017:0396",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0396.html"
          },
          {
            "name": "GLSA-201704-01",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201704-01"
          },
          {
            "name": "[qemu-devel] 20170221 [PATCH] cirrus: add blit_is_unsafe call to cirrus_bitblt_cputovideo (CVE-2017-2620)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04700.html"
          },
          {
            "name": "RHSA-2017:0352",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0352.html"
          },
          {
            "name": "RHSA-2017:0330",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0330.html"
          },
          {
            "name": "RHSA-2017:0332",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0332.html"
          },
          {
            "name": "96378",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/96378"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.citrix.com/article/CTX220771"
          },
          {
            "name": "GLSA-201703-07",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201703-07"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Qemu:",
          "vendor": "QEMU",
          "versions": [
            {
              "status": "affected",
              "version": "2.8"
            }
          ]
        }
      ],
      "datePublic": "2017-02-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2017:0329",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0329.html"
        },
        {
          "name": "RHSA-2017:0334",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0334.html"
        },
        {
          "name": "1037870",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037870"
        },
        {
          "name": "RHSA-2017:0328",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0328.html"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "RHSA-2017:0333",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0333.html"
        },
        {
          "name": "RHSA-2017:0351",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0351.html"
        },
        {
          "name": "RHSA-2017:0454",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0454.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://xenbits.xen.org/xsa/advisory-209.html"
        },
        {
          "name": "RHSA-2017:0331",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0331.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2620"
        },
        {
          "name": "[oss-security] 20170221 CVE-2017-2620 Qemu: display: cirrus: out-of-bounds access issue while in cirrus_bitblt_cputovideo",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/21/1"
        },
        {
          "name": "RHSA-2017:0350",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0350.html"
        },
        {
          "name": "[debian-lts-announce] 20180206 [SECURITY] [DLA 1270-1] xen security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html"
        },
        {
          "name": "RHSA-2017:0396",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0396.html"
        },
        {
          "name": "GLSA-201704-01",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201704-01"
        },
        {
          "name": "[qemu-devel] 20170221 [PATCH] cirrus: add blit_is_unsafe call to cirrus_bitblt_cputovideo (CVE-2017-2620)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04700.html"
        },
        {
          "name": "RHSA-2017:0352",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0352.html"
        },
        {
          "name": "RHSA-2017:0330",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0330.html"
        },
        {
          "name": "RHSA-2017:0332",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0332.html"
        },
        {
          "name": "96378",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/96378"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.citrix.com/article/CTX220771"
        },
        {
          "name": "GLSA-201703-07",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201703-07"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secalert@redhat.com",
          "ID": "CVE-2017-2620",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Qemu:",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "2.8"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "QEMU"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Quick emulator (QEMU) before 2.8 built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to an out-of-bounds access issue. The issue could occur while copying VGA data in cirrus_bitblt_cputovideo. A privileged user inside guest could use this flaw to crash the QEMU process OR potentially execute arbitrary code on host with privileges of the QEMU process."
            }
          ]
        },
        "impact": {
          "cvss": [
            [
              {
                "vectorString": "5.5/CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
                "version": "3.0"
              }
            ],
            [
              {
                "vectorString": "4.9/AV:A/AC:M/Au:S/C:P/I:P/A:P",
                "version": "2.0"
              }
            ]
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-787"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "RHSA-2017:0329",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0329.html"
            },
            {
              "name": "RHSA-2017:0334",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0334.html"
            },
            {
              "name": "1037870",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037870"
            },
            {
              "name": "RHSA-2017:0328",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0328.html"
            },
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "RHSA-2017:0333",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0333.html"
            },
            {
              "name": "RHSA-2017:0351",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0351.html"
            },
            {
              "name": "RHSA-2017:0454",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0454.html"
            },
            {
              "name": "https://xenbits.xen.org/xsa/advisory-209.html",
              "refsource": "CONFIRM",
              "url": "https://xenbits.xen.org/xsa/advisory-209.html"
            },
            {
              "name": "RHSA-2017:0331",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0331.html"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2620",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2620"
            },
            {
              "name": "[oss-security] 20170221 CVE-2017-2620 Qemu: display: cirrus: out-of-bounds access issue while in cirrus_bitblt_cputovideo",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/02/21/1"
            },
            {
              "name": "RHSA-2017:0350",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0350.html"
            },
            {
              "name": "[debian-lts-announce] 20180206 [SECURITY] [DLA 1270-1] xen security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/02/msg00005.html"
            },
            {
              "name": "RHSA-2017:0396",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0396.html"
            },
            {
              "name": "GLSA-201704-01",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201704-01"
            },
            {
              "name": "[qemu-devel] 20170221 [PATCH] cirrus: add blit_is_unsafe call to cirrus_bitblt_cputovideo (CVE-2017-2620)",
              "refsource": "MLIST",
              "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg04700.html"
            },
            {
              "name": "RHSA-2017:0352",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0352.html"
            },
            {
              "name": "RHSA-2017:0330",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0330.html"
            },
            {
              "name": "RHSA-2017:0332",
              "refsource": "REDHAT",
              "url": "http://rhn.redhat.com/errata/RHSA-2017-0332.html"
            },
            {
              "name": "96378",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/96378"
            },
            {
              "name": "https://support.citrix.com/article/CTX220771",
              "refsource": "CONFIRM",
              "url": "https://support.citrix.com/article/CTX220771"
            },
            {
              "name": "GLSA-201703-07",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201703-07"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-2620",
    "datePublished": "2018-07-27T19:00:00",
    "dateReserved": "2016-12-01T00:00:00",
    "dateUpdated": "2024-08-05T14:02:07.311Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-10013 (GCVE-0-2016-10013)

Vulnerability from cvelistv5

Published

2017-01-26 15:00

Modified

2024-08-06 03:07

Severity ?

CWE

Summary

Xen through 4.8.x allows local 64-bit x86 HVM guest OS users to gain privileges by leveraging mishandling of SYSCALL singlestep during emulation.

References

►

URL

Tags

	http://www.securityfocus.com/bid/94963	vdb-entry, x_refsource_BID
	http://www.securitytracker.com/id/1037491	vdb-entry, x_refsource_SECTRACK
	http://www.debian.org/security/2017/dsa-3847	vendor-advisory, x_refsource_DEBIAN
	http://xenbits.xen.org/xsa/advisory-204.html	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:07:31.982Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "94963",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94963"
          },
          {
            "name": "1037491",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037491"
          },
          {
            "name": "DSA-3847",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3847"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xenbits.xen.org/xsa/advisory-204.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-12-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Xen through 4.8.x allows local 64-bit x86 HVM guest OS users to gain privileges by leveraging mishandling of SYSCALL singlestep during emulation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-11-03T18:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "94963",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94963"
        },
        {
          "name": "1037491",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037491"
        },
        {
          "name": "DSA-3847",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3847"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xenbits.xen.org/xsa/advisory-204.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-10013",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Xen through 4.8.x allows local 64-bit x86 HVM guest OS users to gain privileges by leveraging mishandling of SYSCALL singlestep during emulation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "94963",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94963"
            },
            {
              "name": "1037491",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037491"
            },
            {
              "name": "DSA-3847",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3847"
            },
            {
              "name": "http://xenbits.xen.org/xsa/advisory-204.html",
              "refsource": "CONFIRM",
              "url": "http://xenbits.xen.org/xsa/advisory-204.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-10013",
    "datePublished": "2017-01-26T15:00:00",
    "dateReserved": "2016-12-19T00:00:00",
    "dateUpdated": "2024-08-06T03:07:31.982Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-9922 (GCVE-0-2016-9922)

Vulnerability from cvelistv5

Published

2017-03-27 15:00

Modified

2024-08-06 03:07

Severity ?

CWE

Summary

The cirrus_do_copy function in hw/display/cirrus_vga.c in QEMU (aka Quick Emulator), when cirrus graphics mode is VGA, allows local guest OS privileged users to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving blit pitch values.

References

►

URL

Tags

	https://lists.gnu.org/archive/html/qemu-devel/2016-12/msg00442.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:2392	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/94803	vdb-entry, x_refsource_BID
	https://bugzilla.redhat.com/show_bug.cgi?id=1334398	x_refsource_CONFIRM
	http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=4299b90e9ba9ce5ca9024572804ba751aa1a7e70	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2017:2408	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2016/12/09/1	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:07:30.938Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[qemu-devel] 20161205 [PULL 4/4] display: cirrus: check vga bits per pixel(bpp) value",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-12/msg00442.html"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "RHSA-2017:2392",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2392"
          },
          {
            "name": "94803",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94803"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1334398"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=4299b90e9ba9ce5ca9024572804ba751aa1a7e70"
          },
          {
            "name": "RHSA-2017:2408",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2408"
          },
          {
            "name": "[oss-security] 20161209 Re: CVE request Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/12/09/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-12-05T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The cirrus_do_copy function in hw/display/cirrus_vga.c in QEMU (aka Quick Emulator), when cirrus graphics mode is VGA, allows local guest OS privileged users to cause a denial of service (divide-by-zero error and QEMU process crash) via vectors involving blit pitch values."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[qemu-devel] 20161205 [PULL 4/4] display: cirrus: check vga bits per pixel(bpp) value",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-12/msg00442.html"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "RHSA-2017:2392",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2392"
        },
        {
          "name": "94803",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94803"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1334398"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu-project.org/?p=qemu.git%3Ba=commit%3Bh=4299b90e9ba9ce5ca9024572804ba751aa1a7e70"
        },
        {
          "name": "RHSA-2017:2408",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2408"
        },
        {
          "name": "[oss-security] 20161209 Re: CVE request Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/12/09/1"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-9922",
    "datePublished": "2017-03-27T15:00:00",
    "dateReserved": "2016-12-08T00:00:00",
    "dateUpdated": "2024-08-06T03:07:30.938Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2017-2615 (GCVE-0-2017-2615)

Vulnerability from cvelistv5

Published

2018-07-02 18:00

Modified

2024-08-05 14:02

Severity ?

5.5 (Medium) - CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L

CWE

CWE-787

Summary

Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host.

References

►

URL

Tags

	http://rhn.redhat.com/errata/RHSA-2017-0329.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0334.html	vendor-advisory, x_refsource_REDHAT
	https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2615	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1037804	vdb-entry, x_refsource_SECTRACK
	http://rhn.redhat.com/errata/RHSA-2017-0328.html	vendor-advisory, x_refsource_REDHAT
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/95990	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2017-0333.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-27	vendor-advisory, x_refsource_GENTOO
	http://www.openwall.com/lists/oss-security/2017/02/01/6	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2017-0454.html	vendor-advisory, x_refsource_REDHAT
	https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg00015.html	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2017-0331.html	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201702-28	vendor-advisory, x_refsource_GENTOO
	http://rhn.redhat.com/errata/RHSA-2017-0350.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0396.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0309.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0344.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0330.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2017-0332.html	vendor-advisory, x_refsource_REDHAT
	https://support.citrix.com/article/CTX220771	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	qemu	display	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T14:02:06.484Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "RHSA-2017:0329",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0329.html"
          },
          {
            "name": "RHSA-2017:0334",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0334.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2615"
          },
          {
            "name": "1037804",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037804"
          },
          {
            "name": "RHSA-2017:0328",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0328.html"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "95990",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95990"
          },
          {
            "name": "RHSA-2017:0333",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0333.html"
          },
          {
            "name": "GLSA-201702-27",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-27"
          },
          {
            "name": "[oss-security] 20170201 CVE-2017-2615 Qemu: display: cirrus: oob access while doing bitblt copy backward mode",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/02/01/6"
          },
          {
            "name": "RHSA-2017:0454",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0454.html"
          },
          {
            "name": "[qemu-devel] 20170201 [PATCH v3] cirrus: fix oob access issue (CVE-2017-2615)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg00015.html"
          },
          {
            "name": "RHSA-2017:0331",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0331.html"
          },
          {
            "name": "GLSA-201702-28",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-28"
          },
          {
            "name": "RHSA-2017:0350",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0350.html"
          },
          {
            "name": "RHSA-2017:0396",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0396.html"
          },
          {
            "name": "RHSA-2017:0309",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0309.html"
          },
          {
            "name": "RHSA-2017:0344",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0344.html"
          },
          {
            "name": "RHSA-2017:0330",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0330.html"
          },
          {
            "name": "RHSA-2017:0332",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2017-0332.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.citrix.com/article/CTX220771"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "display",
          "vendor": "qemu",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-01-24T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Quick emulator (QEMU) built with the Cirrus CLGD 54xx VGA emulator support is vulnerable to an out-of-bounds access issue. It could occur while copying VGA data via bitblt copy in backward mode. A privileged user inside a guest could use this flaw to crash the QEMU process resulting in DoS or potentially execute arbitrary code on the host with privileges of QEMU process on the host."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "HIGH",
            "attackVector": "ADJACENT_NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:A/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L",
            "version": "3.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-787",
              "description": "CWE-787",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2017:0329",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0329.html"
        },
        {
          "name": "RHSA-2017:0334",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0334.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2615"
        },
        {
          "name": "1037804",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037804"
        },
        {
          "name": "RHSA-2017:0328",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0328.html"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "95990",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95990"
        },
        {
          "name": "RHSA-2017:0333",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0333.html"
        },
        {
          "name": "GLSA-201702-27",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-27"
        },
        {
          "name": "[oss-security] 20170201 CVE-2017-2615 Qemu: display: cirrus: oob access while doing bitblt copy backward mode",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/02/01/6"
        },
        {
          "name": "RHSA-2017:0454",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0454.html"
        },
        {
          "name": "[qemu-devel] 20170201 [PATCH v3] cirrus: fix oob access issue (CVE-2017-2615)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2017-02/msg00015.html"
        },
        {
          "name": "RHSA-2017:0331",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0331.html"
        },
        {
          "name": "GLSA-201702-28",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-28"
        },
        {
          "name": "RHSA-2017:0350",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0350.html"
        },
        {
          "name": "RHSA-2017:0396",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0396.html"
        },
        {
          "name": "RHSA-2017:0309",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0309.html"
        },
        {
          "name": "RHSA-2017:0344",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0344.html"
        },
        {
          "name": "RHSA-2017:0330",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0330.html"
        },
        {
          "name": "RHSA-2017:0332",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2017-0332.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.citrix.com/article/CTX220771"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2017-2615",
    "datePublished": "2018-07-02T18:00:00",
    "dateReserved": "2016-12-01T00:00:00",
    "dateUpdated": "2024-08-05T14:02:06.484Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-9921 (GCVE-0-2016-9921)

Vulnerability from cvelistv5

Published

2016-12-23 22:00

Modified

2024-08-06 03:07

Severity ?

CWE

Summary

Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It could occur while copying VGA data when cirrus graphics mode was set to be VGA. A privileged user inside guest could use this flaw to crash the Qemu process instance on the host, resulting in DoS.

References

►

URL

Tags

	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:2392	vendor-advisory, x_refsource_REDHAT
	https://security.gentoo.org/glsa/201701-49	vendor-advisory, x_refsource_GENTOO
	http://www.securityfocus.com/bid/94803	vdb-entry, x_refsource_BID
	https://access.redhat.com/errata/RHSA-2017:2408	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2016/12/09/1	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:07:31.373Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "RHSA-2017:2392",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2392"
          },
          {
            "name": "GLSA-201701-49",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-49"
          },
          {
            "name": "94803",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94803"
          },
          {
            "name": "RHSA-2017:2408",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2408"
          },
          {
            "name": "[oss-security] 20161209 Re: CVE request Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/12/09/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-12-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Quick emulator (Qemu) built with the Cirrus CLGD 54xx VGA Emulator support is vulnerable to a divide by zero issue. It could occur while copying VGA data when cirrus graphics mode was set to be VGA. A privileged user inside guest could use this flaw to crash the Qemu process instance on the host, resulting in DoS."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "RHSA-2017:2392",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2392"
        },
        {
          "name": "GLSA-201701-49",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-49"
        },
        {
          "name": "94803",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94803"
        },
        {
          "name": "RHSA-2017:2408",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2408"
        },
        {
          "name": "[oss-security] 20161209 Re: CVE request Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/12/09/1"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-9921",
    "datePublished": "2016-12-23T22:00:00",
    "dateReserved": "2016-12-08T00:00:00",
    "dateUpdated": "2024-08-06T03:07:31.373Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2014-8106 (GCVE-0-2014-8106)

Vulnerability from cvelistv5

Published

2014-12-08 16:00

Modified

2024-08-06 13:10

Severity ?

CWE

Summary

Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU before 2.2.0 allows local guest users to execute arbitrary code via vectors related to blit regions. NOTE: this vulnerability exists because an incomplete fix for CVE-2007-1320.

References

►

URL

Tags

	http://www.openwall.com/lists/oss-security/2014/12/04/8	mailing-list, x_refsource_MLIST
	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=bf25983345ca44aec3dd92c57142be45452bd38a	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2015-0795.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2015-0624.html	vendor-advisory, x_refsource_REDHAT
	http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154656.html	vendor-advisory, x_refsource_FEDORA
	http://rhn.redhat.com/errata/RHSA-2015-0891.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/71477	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2015-0643.html	vendor-advisory, x_refsource_REDHAT
	https://exchange.xforce.ibmcloud.com/vulnerabilities/99126	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/60364	third-party-advisory, x_refsource_SECUNIA
	http://rhn.redhat.com/errata/RHSA-2015-0349.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2015-0868.html	vendor-advisory, x_refsource_REDHAT
	http://lists.gnu.org/archive/html/qemu-devel/2014-12/msg00508.html	mailing-list, x_refsource_MLIST
	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d3532a0db02296e687711b8cdc7791924efccea0	x_refsource_CONFIRM
	http://www.debian.org/security/2014/dsa-3088	vendor-advisory, x_refsource_DEBIAN
	http://support.citrix.com/article/CTX200892	x_refsource_CONFIRM
	http://www.debian.org/security/2014/dsa-3087	vendor-advisory, x_refsource_DEBIAN
	http://rhn.redhat.com/errata/RHSA-2015-0867.html	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T13:10:50.632Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[oss-security] 20141204 CVE-2014-8106 qemu: cirrus: insufficient blit region checks",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2014/12/04/8"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=bf25983345ca44aec3dd92c57142be45452bd38a"
          },
          {
            "name": "RHSA-2015:0795",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0795.html"
          },
          {
            "name": "RHSA-2015:0624",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0624.html"
          },
          {
            "name": "FEDORA-2015-5482",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154656.html"
          },
          {
            "name": "RHSA-2015:0891",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0891.html"
          },
          {
            "name": "71477",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/71477"
          },
          {
            "name": "RHSA-2015:0643",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0643.html"
          },
          {
            "name": "qemu-cve20148106-sec-bypass(99126)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/99126"
          },
          {
            "name": "60364",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/60364"
          },
          {
            "name": "RHSA-2015:0349",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0349.html"
          },
          {
            "name": "RHSA-2015:0868",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0868.html"
          },
          {
            "name": "[Qemu-devel] 20141204 [PULL for-2.2 0/2] cirrus: fix blit region check (cve-2014-8106)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://lists.gnu.org/archive/html/qemu-devel/2014-12/msg00508.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d3532a0db02296e687711b8cdc7791924efccea0"
          },
          {
            "name": "DSA-3088",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3088"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.citrix.com/article/CTX200892"
          },
          {
            "name": "DSA-3087",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2014/dsa-3087"
          },
          {
            "name": "RHSA-2015:0867",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://rhn.redhat.com/errata/RHSA-2015-0867.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2014-12-01T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Heap-based buffer overflow in the Cirrus VGA emulator (hw/display/cirrus_vga.c) in QEMU before 2.2.0 allows local guest users to execute arbitrary code via vectors related to blit regions. NOTE: this vulnerability exists because an incomplete fix for CVE-2007-1320."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-09-07T15:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[oss-security] 20141204 CVE-2014-8106 qemu: cirrus: insufficient blit region checks",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2014/12/04/8"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=bf25983345ca44aec3dd92c57142be45452bd38a"
        },
        {
          "name": "RHSA-2015:0795",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0795.html"
        },
        {
          "name": "RHSA-2015:0624",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0624.html"
        },
        {
          "name": "FEDORA-2015-5482",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "http://lists.fedoraproject.org/pipermail/package-announce/2015-April/154656.html"
        },
        {
          "name": "RHSA-2015:0891",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0891.html"
        },
        {
          "name": "71477",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/71477"
        },
        {
          "name": "RHSA-2015:0643",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0643.html"
        },
        {
          "name": "qemu-cve20148106-sec-bypass(99126)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/99126"
        },
        {
          "name": "60364",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/60364"
        },
        {
          "name": "RHSA-2015:0349",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0349.html"
        },
        {
          "name": "RHSA-2015:0868",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0868.html"
        },
        {
          "name": "[Qemu-devel] 20141204 [PULL for-2.2 0/2] cirrus: fix blit region check (cve-2014-8106)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://lists.gnu.org/archive/html/qemu-devel/2014-12/msg00508.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=d3532a0db02296e687711b8cdc7791924efccea0"
        },
        {
          "name": "DSA-3088",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3088"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.citrix.com/article/CTX200892"
        },
        {
          "name": "DSA-3087",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2014/dsa-3087"
        },
        {
          "name": "RHSA-2015:0867",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://rhn.redhat.com/errata/RHSA-2015-0867.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2014-8106",
    "datePublished": "2014-12-08T16:00:00",
    "dateReserved": "2014-10-10T00:00:00",
    "dateUpdated": "2024-08-06T13:10:50.632Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-10155 (GCVE-0-2016-10155)

Vulnerability from cvelistv5

Published

2017-03-15 15:00

Modified

2024-08-06 03:14

Severity ?

CWE

Summary

Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations.

References

►

URL

Tags

	http://www.securityfocus.com/bid/95770	vdb-entry, x_refsource_BID
	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2017/01/21/4	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:2392	vendor-advisory, x_refsource_REDHAT
	http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=eb7a20a3616085d46aa6b4b4224e15587ec67e6e	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201702-28	vendor-advisory, x_refsource_GENTOO
	http://www.openwall.com/lists/oss-security/2017/01/20/14	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2017:2408	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:14:42.765Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "95770",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95770"
          },
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "[oss-security] 20170120 Re: CVE request Qemu: watchdog: memory leakage in virtual hardware watchdog wdt_i6300esb",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/01/21/4"
          },
          {
            "name": "RHSA-2017:2392",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2392"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=eb7a20a3616085d46aa6b4b4224e15587ec67e6e"
          },
          {
            "name": "GLSA-201702-28",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201702-28"
          },
          {
            "name": "[oss-security] 20170120 CVE request Qemu: watchdog: memory leakage in virtual hardware watchdog wdt_i6300esb",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2017/01/20/14"
          },
          {
            "name": "RHSA-2017:2408",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "https://access.redhat.com/errata/RHSA-2017:2408"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2017-01-20T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "95770",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95770"
        },
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "[oss-security] 20170120 Re: CVE request Qemu: watchdog: memory leakage in virtual hardware watchdog wdt_i6300esb",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/01/21/4"
        },
        {
          "name": "RHSA-2017:2392",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2392"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=eb7a20a3616085d46aa6b4b4224e15587ec67e6e"
        },
        {
          "name": "GLSA-201702-28",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201702-28"
        },
        {
          "name": "[oss-security] 20170120 CVE request Qemu: watchdog: memory leakage in virtual hardware watchdog wdt_i6300esb",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2017/01/20/14"
        },
        {
          "name": "RHSA-2017:2408",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2017:2408"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-10155",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Memory leak in hw/watchdog/wdt_i6300esb.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (host memory consumption and QEMU process crash) via a large number of device unplug operations."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "95770",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95770"
            },
            {
              "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
              "refsource": "MLIST",
              "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
            },
            {
              "name": "[oss-security] 20170120 Re: CVE request Qemu: watchdog: memory leakage in virtual hardware watchdog wdt_i6300esb",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/01/21/4"
            },
            {
              "name": "RHSA-2017:2392",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2392"
            },
            {
              "name": "http://git.qemu.org/?p=qemu.git;a=commit;h=eb7a20a3616085d46aa6b4b4224e15587ec67e6e",
              "refsource": "CONFIRM",
              "url": "http://git.qemu.org/?p=qemu.git;a=commit;h=eb7a20a3616085d46aa6b4b4224e15587ec67e6e"
            },
            {
              "name": "GLSA-201702-28",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201702-28"
            },
            {
              "name": "[oss-security] 20170120 CVE request Qemu: watchdog: memory leakage in virtual hardware watchdog wdt_i6300esb",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2017/01/20/14"
            },
            {
              "name": "RHSA-2017:2408",
              "refsource": "REDHAT",
              "url": "https://access.redhat.com/errata/RHSA-2017:2408"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-10155",
    "datePublished": "2017-03-15T15:00:00",
    "dateReserved": "2017-01-20T00:00:00",
    "dateUpdated": "2024-08-06T03:14:42.765Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-10024 (GCVE-0-2016-10024)

Vulnerability from cvelistv5

Published

2017-01-26 15:00

Modified

2024-08-06 03:07

Severity ?

CWE

Summary

Xen through 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service (host hang or crash) by modifying the instruction stream asynchronously while performing certain kernel operations.

References

►

URL

Tags

	https://security.gentoo.org/glsa/201612-56	vendor-advisory, x_refsource_GENTOO
	http://xenbits.xen.org/xsa/advisory-202.html	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/95021	vdb-entry, x_refsource_BID
	http://www.debian.org/security/2017/dsa-3847	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1037517	vdb-entry, x_refsource_SECTRACK
	https://support.citrix.com/article/CTX219378	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:07:31.968Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "GLSA-201612-56",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201612-56"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xenbits.xen.org/xsa/advisory-202.html"
          },
          {
            "name": "95021",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/95021"
          },
          {
            "name": "DSA-3847",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3847"
          },
          {
            "name": "1037517",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037517"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.citrix.com/article/CTX219378"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-12-21T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Xen through 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service (host hang or crash) by modifying the instruction stream asynchronously while performing certain kernel operations."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-11-03T18:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "GLSA-201612-56",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201612-56"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xenbits.xen.org/xsa/advisory-202.html"
        },
        {
          "name": "95021",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/95021"
        },
        {
          "name": "DSA-3847",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3847"
        },
        {
          "name": "1037517",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037517"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.citrix.com/article/CTX219378"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-10024",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Xen through 4.8.x allows local x86 PV guest OS kernel administrators to cause a denial of service (host hang or crash) by modifying the instruction stream asynchronously while performing certain kernel operations."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "GLSA-201612-56",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201612-56"
            },
            {
              "name": "http://xenbits.xen.org/xsa/advisory-202.html",
              "refsource": "CONFIRM",
              "url": "http://xenbits.xen.org/xsa/advisory-202.html"
            },
            {
              "name": "95021",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/95021"
            },
            {
              "name": "DSA-3847",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3847"
            },
            {
              "name": "1037517",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037517"
            },
            {
              "name": "https://support.citrix.com/article/CTX219378",
              "refsource": "CONFIRM",
              "url": "https://support.citrix.com/article/CTX219378"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-10024",
    "datePublished": "2017-01-26T15:00:00",
    "dateReserved": "2016-12-21T00:00:00",
    "dateUpdated": "2024-08-06T03:07:31.968Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-9776 (GCVE-0-2016-9776)

Vulnerability from cvelistv5

Published

2016-12-29 22:00

Modified

2024-08-06 02:59

Severity ?

CWE

Summary

QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in 'mcf_fec_receive'. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading to DoS.

References

►

URL

Tags

	https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html	mailing-list, x_refsource_MLIST
	https://security.gentoo.org/glsa/201701-49	vendor-advisory, x_refsource_GENTOO
	http://www.openwall.com/lists/oss-security/2016/12/02/3	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/12/02/8	mailing-list, x_refsource_MLIST
	https://bugzilla.redhat.com/show_bug.cgi?id=1400829	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/94638	vdb-entry, x_refsource_BID
	https://lists.gnu.org/archive/html/qemu-devel/2016-11/msg05324.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:59:03.469Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
          },
          {
            "name": "GLSA-201701-49",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-49"
          },
          {
            "name": "[oss-security] 20161202 CVE request Qemu: net: mcf_fec: infinite loop while receiving data in mcf_fec_receive",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/12/02/3"
          },
          {
            "name": "[oss-security] 20161202 Re: CVE request Qemu: net: mcf_fec: infinite loop while receiving data in mcf_fec_receive",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/12/02/8"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400829"
          },
          {
            "name": "94638",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94638"
          },
          {
            "name": "[qemu-devel] 20161130 [PATCH] net: mcf: check receive buffer size register value",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-11/msg05324.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-11-30T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "QEMU (aka Quick Emulator) built with the ColdFire Fast Ethernet Controller emulator support is vulnerable to an infinite loop issue. It could occur while receiving packets in \u0027mcf_fec_receive\u0027. A privileged user/process inside guest could use this issue to crash the QEMU process on the host leading to DoS."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-09-07T09:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "[debian-lts-announce] 20180906 [SECURITY] [DLA 1497-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/09/msg00007.html"
        },
        {
          "name": "GLSA-201701-49",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-49"
        },
        {
          "name": "[oss-security] 20161202 CVE request Qemu: net: mcf_fec: infinite loop while receiving data in mcf_fec_receive",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/12/02/3"
        },
        {
          "name": "[oss-security] 20161202 Re: CVE request Qemu: net: mcf_fec: infinite loop while receiving data in mcf_fec_receive",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/12/02/8"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1400829"
        },
        {
          "name": "94638",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94638"
        },
        {
          "name": "[qemu-devel] 20161130 [PATCH] net: mcf: check receive buffer size register value",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-11/msg05324.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-9776",
    "datePublished": "2016-12-29T22:00:00",
    "dateReserved": "2016-12-02T00:00:00",
    "dateUpdated": "2024-08-06T02:59:03.469Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-9101 (GCVE-0-2016-9101)

Vulnerability from cvelistv5

Published

2016-12-09 22:00

Modified

2024-08-06 02:42

Severity ?

CWE

Summary

Memory leak in hw/net/eepro100.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by repeatedly unplugging an i8255x (PRO100) NIC device.

References

►

URL

Tags

	http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/201701-49	vendor-advisory, x_refsource_GENTOO
	http://www.openwall.com/lists/oss-security/2016/10/30/5	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/10/27/14	mailing-list, x_refsource_MLIST
	https://lists.gnu.org/archive/html/qemu-devel/2016-10/msg03024.html	mailing-list, x_refsource_MLIST
	https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/bid/93957	vdb-entry, x_refsource_BID

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T02:42:10.139Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "openSUSE-SU-2016:3237",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html"
          },
          {
            "name": "GLSA-201701-49",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201701-49"
          },
          {
            "name": "[oss-security] 20161030 Re: CVE request Qemu: net: eepro100 memory leakage at device unplug",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/10/30/5"
          },
          {
            "name": "[oss-security] 20161028 CVE request Qemu: net: eepro100 memory leakage at device unplug",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2016/10/27/14"
          },
          {
            "name": "[qemu-devel] 20161013 [PATCH] eepro100: Fix memory leak and simplify code for VMStateDescription",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-10/msg03024.html"
          },
          {
            "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
          },
          {
            "name": "93957",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/93957"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-10-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Memory leak in hw/net/eepro100.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption and QEMU process crash) by repeatedly unplugging an i8255x (PRO100) NIC device."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-12-01T10:57:01",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "openSUSE-SU-2016:3237",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-updates/2016-12/msg00140.html"
        },
        {
          "name": "GLSA-201701-49",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201701-49"
        },
        {
          "name": "[oss-security] 20161030 Re: CVE request Qemu: net: eepro100 memory leakage at device unplug",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/10/30/5"
        },
        {
          "name": "[oss-security] 20161028 CVE request Qemu: net: eepro100 memory leakage at device unplug",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2016/10/27/14"
        },
        {
          "name": "[qemu-devel] 20161013 [PATCH] eepro100: Fix memory leak and simplify code for VMStateDescription",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2016-10/msg03024.html"
        },
        {
          "name": "[debian-lts-announce] 20181130 [SECURITY] [DLA 1599-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2018/11/msg00038.html"
        },
        {
          "name": "93957",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/93957"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2016-9101",
    "datePublished": "2016-12-09T22:00:00",
    "dateReserved": "2016-10-28T00:00:00",
    "dateUpdated": "2024-08-06T02:42:10.139Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2016-9932 (GCVE-0-2016-9932)

Vulnerability from cvelistv5

Published

2017-01-26 15:00

Modified

2024-08-06 03:07

Severity ?

CWE

Summary

CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a "supposedly-ignored" operand size prefix.

References

►

URL

Tags

	http://xenbits.xen.org/xsa/advisory-200.html	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/201612-56	vendor-advisory, x_refsource_GENTOO
	http://www.debian.org/security/2017/dsa-3847	vendor-advisory, x_refsource_DEBIAN
	http://www.securitytracker.com/id/1037468	vdb-entry, x_refsource_SECTRACK
	http://www.securityfocus.com/bid/94863	vdb-entry, x_refsource_BID
	https://support.citrix.com/article/CTX219378	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T03:07:31.379Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xenbits.xen.org/xsa/advisory-200.html"
          },
          {
            "name": "GLSA-201612-56",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/201612-56"
          },
          {
            "name": "DSA-3847",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "http://www.debian.org/security/2017/dsa-3847"
          },
          {
            "name": "1037468",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1037468"
          },
          {
            "name": "94863",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/94863"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://support.citrix.com/article/CTX219378"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2016-12-13T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a \"supposedly-ignored\" operand size prefix."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-11-03T18:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xenbits.xen.org/xsa/advisory-200.html"
        },
        {
          "name": "GLSA-201612-56",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/201612-56"
        },
        {
          "name": "DSA-3847",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "http://www.debian.org/security/2017/dsa-3847"
        },
        {
          "name": "1037468",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id/1037468"
        },
        {
          "name": "94863",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/94863"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://support.citrix.com/article/CTX219378"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2016-9932",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "CMPXCHG8B emulation in Xen 3.3.x through 4.7.x on x86 systems allows local HVM guest OS users to obtain sensitive information from host stack memory via a \"supposedly-ignored\" operand size prefix."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://xenbits.xen.org/xsa/advisory-200.html",
              "refsource": "CONFIRM",
              "url": "http://xenbits.xen.org/xsa/advisory-200.html"
            },
            {
              "name": "GLSA-201612-56",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/201612-56"
            },
            {
              "name": "DSA-3847",
              "refsource": "DEBIAN",
              "url": "http://www.debian.org/security/2017/dsa-3847"
            },
            {
              "name": "1037468",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id/1037468"
            },
            {
              "name": "94863",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/94863"
            },
            {
              "name": "https://support.citrix.com/article/CTX219378",
              "refsource": "CONFIRM",
              "url": "https://support.citrix.com/article/CTX219378"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2016-9932",
    "datePublished": "2017-01-26T15:00:00",
    "dateReserved": "2016-12-12T00:00:00",
    "dateUpdated": "2024-08-06T03:07:31.379Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2017:0718-1

Vulnerability from csaf_suse

CVE-2016-9911 (GCVE-0-2016-9911)

Vulnerability from cvelistv5

CVE-2017-2620 (GCVE-0-2017-2620)

Vulnerability from cvelistv5

CVE-2016-10013 (GCVE-0-2016-10013)

Vulnerability from cvelistv5

CVE-2016-9922 (GCVE-0-2016-9922)

Vulnerability from cvelistv5

CVE-2017-2615 (GCVE-0-2017-2615)

Vulnerability from cvelistv5

CVE-2016-9921 (GCVE-0-2016-9921)

Vulnerability from cvelistv5

CVE-2014-8106 (GCVE-0-2014-8106)

Vulnerability from cvelistv5

CVE-2016-10155 (GCVE-0-2016-10155)

Vulnerability from cvelistv5

CVE-2016-10024 (GCVE-0-2016-10024)

Vulnerability from cvelistv5

CVE-2016-9776 (GCVE-0-2016-9776)

Vulnerability from cvelistv5

CVE-2016-9101 (GCVE-0-2016-9101)

Vulnerability from cvelistv5

CVE-2016-9932 (GCVE-0-2016-9932)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature