csaf_suse - suse-su-2021:1023-1

suse-su-2021:1023-1

Vulnerability from csaf_suse

Published

2021-04-06 15:52

Modified

2021-04-06 15:52

Summary

Security update for xen

Notes

Title of the patch

Security update for xen

Description of the patch

This update for xen fixes the following issues: - CVE-2021-3308: VUL-0: xen: IRQ vector leak on x86 (bsc#1181254, XSA-360) - CVE-2021-28687: VUL-0: xen: HVM soft-reset crashes toolstack (bsc#1183072, XSA-368) - CVE-2021-20257: VUL-0: xen: infinite loop issue in the e1000 NIC emulator (bsc#1182846) - CVE-2020-28368: VUL-0: xen: Intel RAPL sidechannel attack aka PLATYPUS attack aka (bsc#1178591, XSA-351) - L3: conring size for XEN HV's with huge memory to small. Inital Xen logs cut (bsc#1177204) - Kdump of HVM fails, soft-reset not handled by libxl (bsc#1179148) - OpenQA job causes libvirtd to dump core when running kdump inside domain (bsc#1181989) - Allow restart of xenwatchdogd, enable tuning of keep-alive interval and timeout options via XENWATCHDOGD_ARGS= (bsc#1178736) - The receiving side did detect holes in a to-be-allocated superpage, but allocated a superpage anyway. This resulted to over-allocation (bsc#1177112) - The receiving side may punch holes incorrectly into optimistically allocated superpages. Also reduce overhead in bitmap handling (bsc#1177112) - Upstream bug fixes (bsc#1027519)

Patchnames

SUSE-2021-1023,SUSE-SLE-SDK-12-SP5-2021-1023,SUSE-SLE-SERVER-12-SP5-2021-1023

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for xen",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for xen fixes the following issues:\n\n- CVE-2021-3308: VUL-0: xen: IRQ vector leak on x86 (bsc#1181254, XSA-360)\n- CVE-2021-28687: VUL-0: xen: HVM soft-reset crashes toolstack (bsc#1183072, XSA-368)\n- CVE-2021-20257: VUL-0: xen: infinite loop issue in the e1000 NIC emulator (bsc#1182846)\n- CVE-2020-28368: VUL-0: xen: Intel RAPL sidechannel attack aka PLATYPUS attack aka (bsc#1178591, XSA-351)\n- L3: conring size for XEN HV\u0027s with huge memory to small. Inital Xen logs cut (bsc#1177204)\n- Kdump of HVM fails, soft-reset not handled by libxl (bsc#1179148)\n- OpenQA job causes libvirtd to dump core when running kdump inside domain (bsc#1181989)\n- Allow restart of xenwatchdogd, enable tuning of keep-alive interval and timeout\n  options via XENWATCHDOGD_ARGS= (bsc#1178736)\n- The receiving side did detect holes in a to-be-allocated superpage, but allocated a superpage anyway.\n  This resulted to over-allocation (bsc#1177112)\n- The receiving side may punch holes incorrectly into optimistically allocated superpages.\n  Also reduce overhead in bitmap handling (bsc#1177112)\n- Upstream bug fixes (bsc#1027519)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "SUSE-2021-1023,SUSE-SLE-SDK-12-SP5-2021-1023,SUSE-SLE-SERVER-12-SP5-2021-1023",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2021_1023-1.json"
      },
      {
        "category": "self",
        "summary": "URL for SUSE-SU-2021:1023-1",
        "url": "https://www.suse.com/support/update/announcement/2021/suse-su-20211023-1/"
      },
      {
        "category": "self",
        "summary": "E-Mail link for SUSE-SU-2021:1023-1",
        "url": "https://lists.suse.com/pipermail/sle-security-updates/2021-April/008585.html"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1027519",
        "url": "https://bugzilla.suse.com/1027519"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177112",
        "url": "https://bugzilla.suse.com/1177112"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1177204",
        "url": "https://bugzilla.suse.com/1177204"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178591",
        "url": "https://bugzilla.suse.com/1178591"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1178736",
        "url": "https://bugzilla.suse.com/1178736"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1179148",
        "url": "https://bugzilla.suse.com/1179148"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1181254",
        "url": "https://bugzilla.suse.com/1181254"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1181989",
        "url": "https://bugzilla.suse.com/1181989"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1182846",
        "url": "https://bugzilla.suse.com/1182846"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1183072",
        "url": "https://bugzilla.suse.com/1183072"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2020-28368 page",
        "url": "https://www.suse.com/security/cve/CVE-2020-28368/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-20257 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-20257/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-28687 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-28687/"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2021-3308 page",
        "url": "https://www.suse.com/security/cve/CVE-2021-3308/"
      }
    ],
    "title": "Security update for xen",
    "tracking": {
      "current_release_date": "2021-04-06T15:52:02Z",
      "generator": {
        "date": "2021-04-06T15:52:02Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "SUSE-SU-2021:1023-1",
      "initial_release_date": "2021-04-06T15:52:02Z",
      "revision_history": [
        {
          "date": "2021-04-06T15:52:02Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xen-4.12.4_09-3.39.3.aarch64",
                "product": {
                  "name": "xen-4.12.4_09-3.39.3.aarch64",
                  "product_id": "xen-4.12.4_09-3.39.3.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-devel-4.12.4_09-3.39.3.aarch64",
                "product": {
                  "name": "xen-devel-4.12.4_09-3.39.3.aarch64",
                  "product_id": "xen-devel-4.12.4_09-3.39.3.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-doc-html-4.12.4_09-3.39.3.aarch64",
                "product": {
                  "name": "xen-doc-html-4.12.4_09-3.39.3.aarch64",
                  "product_id": "xen-doc-html-4.12.4_09-3.39.3.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-libs-4.12.4_09-3.39.3.aarch64",
                "product": {
                  "name": "xen-libs-4.12.4_09-3.39.3.aarch64",
                  "product_id": "xen-libs-4.12.4_09-3.39.3.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-tools-4.12.4_09-3.39.3.aarch64",
                "product": {
                  "name": "xen-tools-4.12.4_09-3.39.3.aarch64",
                  "product_id": "xen-tools-4.12.4_09-3.39.3.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-tools-domU-4.12.4_09-3.39.3.aarch64",
                "product": {
                  "name": "xen-tools-domU-4.12.4_09-3.39.3.aarch64",
                  "product_id": "xen-tools-domU-4.12.4_09-3.39.3.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xen-libs-64bit-4.12.4_09-3.39.3.aarch64_ilp32",
                "product": {
                  "name": "xen-libs-64bit-4.12.4_09-3.39.3.aarch64_ilp32",
                  "product_id": "xen-libs-64bit-4.12.4_09-3.39.3.aarch64_ilp32"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64_ilp32"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xen-devel-4.12.4_09-3.39.3.i586",
                "product": {
                  "name": "xen-devel-4.12.4_09-3.39.3.i586",
                  "product_id": "xen-devel-4.12.4_09-3.39.3.i586"
                }
              },
              {
                "category": "product_version",
                "name": "xen-libs-4.12.4_09-3.39.3.i586",
                "product": {
                  "name": "xen-libs-4.12.4_09-3.39.3.i586",
                  "product_id": "xen-libs-4.12.4_09-3.39.3.i586"
                }
              },
              {
                "category": "product_version",
                "name": "xen-tools-domU-4.12.4_09-3.39.3.i586",
                "product": {
                  "name": "xen-tools-domU-4.12.4_09-3.39.3.i586",
                  "product_id": "xen-tools-domU-4.12.4_09-3.39.3.i586"
                }
              }
            ],
            "category": "architecture",
            "name": "i586"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "xen-4.12.4_09-3.39.3.x86_64",
                "product": {
                  "name": "xen-4.12.4_09-3.39.3.x86_64",
                  "product_id": "xen-4.12.4_09-3.39.3.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-devel-4.12.4_09-3.39.3.x86_64",
                "product": {
                  "name": "xen-devel-4.12.4_09-3.39.3.x86_64",
                  "product_id": "xen-devel-4.12.4_09-3.39.3.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-doc-html-4.12.4_09-3.39.3.x86_64",
                "product": {
                  "name": "xen-doc-html-4.12.4_09-3.39.3.x86_64",
                  "product_id": "xen-doc-html-4.12.4_09-3.39.3.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-libs-4.12.4_09-3.39.3.x86_64",
                "product": {
                  "name": "xen-libs-4.12.4_09-3.39.3.x86_64",
                  "product_id": "xen-libs-4.12.4_09-3.39.3.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
                "product": {
                  "name": "xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
                  "product_id": "xen-libs-32bit-4.12.4_09-3.39.3.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-tools-4.12.4_09-3.39.3.x86_64",
                "product": {
                  "name": "xen-tools-4.12.4_09-3.39.3.x86_64",
                  "product_id": "xen-tools-4.12.4_09-3.39.3.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "xen-tools-domU-4.12.4_09-3.39.3.x86_64",
                "product": {
                  "name": "xen-tools-domU-4.12.4_09-3.39.3.x86_64",
                  "product_id": "xen-tools-domU-4.12.4_09-3.39.3.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Software Development Kit 12 SP5",
                  "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sle-sdk:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles:12:sp5"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                "product": {
                  "name": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                  "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:suse:sles_sap:12:sp5"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-devel-4.12.4_09-3.39.3.aarch64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.aarch64"
        },
        "product_reference": "xen-devel-4.12.4_09-3.39.3.aarch64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-devel-4.12.4_09-3.39.3.x86_64 as component of SUSE Linux Enterprise Software Development Kit 12 SP5",
          "product_id": "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.x86_64"
        },
        "product_reference": "xen-devel-4.12.4_09-3.39.3.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Software Development Kit 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-4.12.4_09-3.39.3.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:xen-4.12.4_09-3.39.3.x86_64"
        },
        "product_reference": "xen-4.12.4_09-3.39.3.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-doc-html-4.12.4_09-3.39.3.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64"
        },
        "product_reference": "xen-doc-html-4.12.4_09-3.39.3.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-4.12.4_09-3.39.3.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64"
        },
        "product_reference": "xen-libs-4.12.4_09-3.39.3.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-32bit-4.12.4_09-3.39.3.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64"
        },
        "product_reference": "xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-tools-4.12.4_09-3.39.3.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64"
        },
        "product_reference": "xen-tools-4.12.4_09-3.39.3.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-tools-domU-4.12.4_09-3.39.3.x86_64 as component of SUSE Linux Enterprise Server 12 SP5",
          "product_id": "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64"
        },
        "product_reference": "xen-tools-domU-4.12.4_09-3.39.3.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-4.12.4_09-3.39.3.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.4_09-3.39.3.x86_64"
        },
        "product_reference": "xen-4.12.4_09-3.39.3.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-doc-html-4.12.4_09-3.39.3.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64"
        },
        "product_reference": "xen-doc-html-4.12.4_09-3.39.3.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-4.12.4_09-3.39.3.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64"
        },
        "product_reference": "xen-libs-4.12.4_09-3.39.3.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-libs-32bit-4.12.4_09-3.39.3.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64"
        },
        "product_reference": "xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-tools-4.12.4_09-3.39.3.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64"
        },
        "product_reference": "xen-tools-4.12.4_09-3.39.3.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "xen-tools-domU-4.12.4_09-3.39.3.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 12 SP5",
          "product_id": "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64"
        },
        "product_reference": "xen-tools-domU-4.12.4_09-3.39.3.x86_64",
        "relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 12 SP5"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-28368",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2020-28368"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the guest) via a side-channel attack on a power/energy monitoring interface, aka a \"Platypus\" attack. NOTE: there is only one logically independent fix: to change the access control for each such interface in Xen.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:xen-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2020-28368",
          "url": "https://www.suse.com/security/cve/CVE-2020-28368"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178591 for CVE-2020-28368",
          "url": "https://bugzilla.suse.com/1178591"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1178658 for CVE-2020-28368",
          "url": "https://bugzilla.suse.com/1178658"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:xen-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.6,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:xen-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-04-06T15:52:02Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2020-28368"
    },
    {
      "cve": "CVE-2021-20257",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-20257"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:xen-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-20257",
          "url": "https://www.suse.com/security/cve/CVE-2021-20257"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1182577 for CVE-2021-20257",
          "url": "https://bugzilla.suse.com/1182577"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1182846 for CVE-2021-20257",
          "url": "https://bugzilla.suse.com/1182846"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:xen-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 3.2,
            "baseSeverity": "LOW",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:xen-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-04-06T15:52:02Z",
          "details": "low"
        }
      ],
      "title": "CVE-2021-20257"
    },
    {
      "cve": "CVE-2021-28687",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-28687"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of them. When the \"soft reset\" feature was implemented, the libxl__domain_suspend_state structure didn\u0027t require any initialization or disposal. At some point later, an initialization function was introduced for the structure; but the \"soft reset\" path wasn\u0027t refactored to call the initialization function. When a guest nwo initiates a \"soft reboot\", uninitialized data structure leads to an assert() when later code finds the structure in an unexpected state. The effect of this is to crash the process monitoring the guest. How this affects the system depends on the structure of the toolstack. For xl, this will have no security-relevant effect: every VM has its own independent monitoring process, which contains no state. The domain in question will hang in a crashed state, but can be destroyed by `xl destroy` just like any other non-cooperating domain. For daemon-based toolstacks linked against libxl, such as libvirt, this will crash the toolstack, losing the state of any in-progress operations (localized DoS), and preventing further administrator operations unless the daemon is configured to restart automatically (system-wide DoS). If crashes \"leak\" resources, then repeated crashes could use up resources, also causing a system-wide DoS.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:xen-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-28687",
          "url": "https://www.suse.com/security/cve/CVE-2021-28687"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1183072 for CVE-2021-28687",
          "url": "https://bugzilla.suse.com/1183072"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:xen-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.5,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:xen-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-04-06T15:52:02Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-28687"
    },
    {
      "cve": "CVE-2021-3308",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2021-3308"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through devices can force the allocation of all IDT vectors on the system by rebooting itself with MSI or MSI-X capabilities enabled and entries setup. Such reboots will leak any vectors used by the MSI(-X) entries that the guest might had enabled, and hence will lead to vector exhaustion on the system, not allowing further PCI pass through devices to work properly. HVM guests with PCI pass through devices can mount a Denial of Service (DoS) attack affecting the pass through of PCI devices to other guests or the hardware domain. In the latter case, this would affect the entire host.",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "SUSE Linux Enterprise Server 12 SP5:xen-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.aarch64",
          "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2021-3308",
          "url": "https://www.suse.com/security/cve/CVE-2021-3308"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1181254 for CVE-2021-3308",
          "url": "https://bugzilla.suse.com/1181254"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "SUSE Linux Enterprise Server 12 SP5:xen-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "SUSE Linux Enterprise Server 12 SP5:xen-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-doc-html-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-32bit-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-libs-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Server for SAP Applications 12 SP5:xen-tools-domU-4.12.4_09-3.39.3.x86_64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.aarch64",
            "SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.4_09-3.39.3.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2021-04-06T15:52:02Z",
          "details": "moderate"
        }
      ],
      "title": "CVE-2021-3308"
    }
  ]
}

CVE-2021-3308 (GCVE-0-2021-3308)

Vulnerability from cvelistv5

Published

2021-01-26 19:58

Modified

2024-08-03 16:53

Severity ?

CWE

Summary

An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through devices can force the allocation of all IDT vectors on the system by rebooting itself with MSI or MSI-X capabilities enabled and entries setup. Such reboots will leak any vectors used by the MSI(-X) entries that the guest might had enabled, and hence will lead to vector exhaustion on the system, not allowing further PCI pass through devices to work properly. HVM guests with PCI pass through devices can mount a Denial of Service (DoS) attack affecting the pass through of PCI devices to other guests or the hardware domain. In the latter case, this would affect the entire host.

References

►

URL

Tags

	http://xenbits.xen.org/xsa/advisory-360.html	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2021/01/26/4	mailing-list, x_refsource_MLIST
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S5C42TMQYB6SDVT2MPFEWY65A6RSUVBN/	vendor-advisory, x_refsource_FEDORA
	https://security.gentoo.org/glsa/202107-30	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T16:53:16.509Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://xenbits.xen.org/xsa/advisory-360.html"
          },
          {
            "name": "[oss-security] 20210126 Xen Security Advisory 360 v2 (CVE-2021-3308) - IRQ vector leak on x86",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2021/01/26/4"
          },
          {
            "name": "FEDORA-2021-16c9c40d4d",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S5C42TMQYB6SDVT2MPFEWY65A6RSUVBN/"
          },
          {
            "name": "GLSA-202107-30",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202107-30"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through devices can force the allocation of all IDT vectors on the system by rebooting itself with MSI or MSI-X capabilities enabled and entries setup. Such reboots will leak any vectors used by the MSI(-X) entries that the guest might had enabled, and hence will lead to vector exhaustion on the system, not allowing further PCI pass through devices to work properly. HVM guests with PCI pass through devices can mount a Denial of Service (DoS) attack affecting the pass through of PCI devices to other guests or the hardware domain. In the latter case, this would affect the entire host."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-07-12T04:06:30",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://xenbits.xen.org/xsa/advisory-360.html"
        },
        {
          "name": "[oss-security] 20210126 Xen Security Advisory 360 v2 (CVE-2021-3308) - IRQ vector leak on x86",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2021/01/26/4"
        },
        {
          "name": "FEDORA-2021-16c9c40d4d",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S5C42TMQYB6SDVT2MPFEWY65A6RSUVBN/"
        },
        {
          "name": "GLSA-202107-30",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202107-30"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2021-3308",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "An issue was discovered in Xen 4.12.3 through 4.12.4 and 4.13.1 through 4.14.x. An x86 HVM guest with PCI pass through devices can force the allocation of all IDT vectors on the system by rebooting itself with MSI or MSI-X capabilities enabled and entries setup. Such reboots will leak any vectors used by the MSI(-X) entries that the guest might had enabled, and hence will lead to vector exhaustion on the system, not allowing further PCI pass through devices to work properly. HVM guests with PCI pass through devices can mount a Denial of Service (DoS) attack affecting the pass through of PCI devices to other guests or the hardware domain. In the latter case, this would affect the entire host."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://xenbits.xen.org/xsa/advisory-360.html",
              "refsource": "MISC",
              "url": "http://xenbits.xen.org/xsa/advisory-360.html"
            },
            {
              "name": "[oss-security] 20210126 Xen Security Advisory 360 v2 (CVE-2021-3308) - IRQ vector leak on x86",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2021/01/26/4"
            },
            {
              "name": "FEDORA-2021-16c9c40d4d",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/S5C42TMQYB6SDVT2MPFEWY65A6RSUVBN/"
            },
            {
              "name": "GLSA-202107-30",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202107-30"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2021-3308",
    "datePublished": "2021-01-26T19:58:23",
    "dateReserved": "2021-01-26T00:00:00",
    "dateUpdated": "2024-08-03T16:53:16.509Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-20257 (GCVE-0-2021-20257)

Vulnerability from cvelistv5

Published

2022-03-16 14:12

Modified

2024-08-03 17:37

Severity ?

CWE

CWE-835

Summary

An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

References

►

URL

Tags

	https://www.openwall.com/lists/oss-security/2021/02/25/2	x_refsource_MISC
	https://lists.gnu.org/archive/html/qemu-devel/2021-02/msg07428.html	x_refsource_MISC
	https://github.com/qemu/qemu/commit/3de46e6fc489c52c9431a8a832ad8170a7569bd8	x_refsource_MISC
	https://bugzilla.redhat.com/show_bug.cgi?id=1930087	x_refsource_MISC
	https://security.netapp.com/advisory/ntap-20220425-0003/	x_refsource_CONFIRM
	https://security.gentoo.org/glsa/202208-27	vendor-advisory, x_refsource_GENTOO
	https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	QEMU	Version: Fixed-In v6.2.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T17:37:23.120Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.openwall.com/lists/oss-security/2021/02/25/2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://lists.gnu.org/archive/html/qemu-devel/2021-02/msg07428.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/qemu/qemu/commit/3de46e6fc489c52c9431a8a832ad8170a7569bd8"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1930087"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://security.netapp.com/advisory/ntap-20220425-0003/"
          },
          {
            "name": "GLSA-202208-27",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202208-27"
          },
          {
            "name": "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "QEMU",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "Fixed-In v6.2.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-835",
              "description": "CWE-835",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-09-05T05:06:44",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.openwall.com/lists/oss-security/2021/02/25/2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://lists.gnu.org/archive/html/qemu-devel/2021-02/msg07428.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/qemu/qemu/commit/3de46e6fc489c52c9431a8a832ad8170a7569bd8"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1930087"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://security.netapp.com/advisory/ntap-20220425-0003/"
        },
        {
          "name": "GLSA-202208-27",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202208-27"
        },
        {
          "name": "[debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security update",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2021-20257",
    "datePublished": "2022-03-16T14:12:26",
    "dateReserved": "2020-12-17T00:00:00",
    "dateUpdated": "2024-08-03T17:37:23.120Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2021-28687 (GCVE-0-2021-28687)

Vulnerability from cvelistv5

Published

2021-06-11 14:54

Modified

2024-08-03 21:47

Severity ?

CWE

unknown

Summary

HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of them. When the "soft reset" feature was implemented, the libxl__domain_suspend_state structure didn't require any initialization or disposal. At some point later, an initialization function was introduced for the structure; but the "soft reset" path wasn't refactored to call the initialization function. When a guest nwo initiates a "soft reboot", uninitialized data structure leads to an assert() when later code finds the structure in an unexpected state. The effect of this is to crash the process monitoring the guest. How this affects the system depends on the structure of the toolstack. For xl, this will have no security-relevant effect: every VM has its own independent monitoring process, which contains no state. The domain in question will hang in a crashed state, but can be destroyed by `xl destroy` just like any other non-cooperating domain. For daemon-based toolstacks linked against libxl, such as libvirt, this will crash the toolstack, losing the state of any in-progress operations (localized DoS), and preventing further administrator operations unless the daemon is configured to restart automatically (system-wide DoS). If crashes "leak" resources, then repeated crashes could use up resources, also causing a system-wide DoS.

References

►

URL

Tags

	https://xenbits.xenproject.org/xsa/advisory-368.txt	x_refsource_MISC
	https://security.gentoo.org/glsa/202107-30	vendor-advisory, x_refsource_GENTOO

Impacted products

Vendor

Product

Version

►

Xen

xen

Version: xen-unstable

	Xen	xen	Version: 4.12.x < unspecified Patch: next of 4.13.x < unspecified
	Xen	xen	Version: 4.14.x

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T21:47:33.121Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://xenbits.xenproject.org/xsa/advisory-368.txt"
          },
          {
            "name": "GLSA-202107-30",
            "tags": [
              "vendor-advisory",
              "x_refsource_GENTOO",
              "x_transferred"
            ],
            "url": "https://security.gentoo.org/glsa/202107-30"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "xen",
          "vendor": "Xen",
          "versions": [
            {
              "status": "affected",
              "version": "xen-unstable"
            }
          ]
        },
        {
          "product": "xen",
          "vendor": "Xen",
          "versions": [
            {
              "lessThan": "4.12",
              "status": "unknown",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "4.12.x",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "unaffected",
              "version": "next of 4.13.x",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "xen",
          "vendor": "Xen",
          "versions": [
            {
              "status": "affected",
              "version": "4.14.x"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "{\u0027credit_data\u0027: {\u0027description\u0027: {\u0027description_data\u0027: [{\u0027lang\u0027: \u0027eng\u0027, \u0027value\u0027: \u0027This issue was discovered by Olaf Hering.\u0027}]}}}"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of them. When the \"soft reset\" feature was implemented, the libxl__domain_suspend_state structure didn\u0027t require any initialization or disposal. At some point later, an initialization function was introduced for the structure; but the \"soft reset\" path wasn\u0027t refactored to call the initialization function. When a guest nwo initiates a \"soft reboot\", uninitialized data structure leads to an assert() when later code finds the structure in an unexpected state. The effect of this is to crash the process monitoring the guest. How this affects the system depends on the structure of the toolstack. For xl, this will have no security-relevant effect: every VM has its own independent monitoring process, which contains no state. The domain in question will hang in a crashed state, but can be destroyed by `xl destroy` just like any other non-cooperating domain. For daemon-based toolstacks linked against libxl, such as libvirt, this will crash the toolstack, losing the state of any in-progress operations (localized DoS), and preventing further administrator operations unless the daemon is configured to restart automatically (system-wide DoS). If crashes \"leak\" resources, then repeated crashes could use up resources, also causing a system-wide DoS."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "description": {
                "description_data": [
                  {
                    "lang": "eng",
                    "value": "A malicious guest can crash the management daemon, leading to at least\na localized, possibly system-wide denial-of-service."
                  }
                ]
              }
            },
            "type": "unknown"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "unknown",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-07-12T04:06:39",
        "orgId": "23aa2041-22e1-471f-9209-9b7396fa234f",
        "shortName": "XEN"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://xenbits.xenproject.org/xsa/advisory-368.txt"
        },
        {
          "name": "GLSA-202107-30",
          "tags": [
            "vendor-advisory",
            "x_refsource_GENTOO"
          ],
          "url": "https://security.gentoo.org/glsa/202107-30"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "security@xen.org",
          "ID": "CVE-2021-28687",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "xen",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "xen-unstable"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "xen",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "?\u003c",
                            "version_value": "4.12"
                          },
                          {
                            "version_affected": "\u003e=",
                            "version_value": "4.12.x"
                          },
                          {
                            "version_affected": "!\u003e",
                            "version_value": "4.13.x"
                          }
                        ]
                      }
                    },
                    {
                      "product_name": "xen",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "4.14.x"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Xen"
              }
            ]
          }
        },
        "configuration": {
          "configuration_data": {
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Only Xen versions 4.12 through 4.14 are affected.  Earlier versions\nare not affected.\n\nThe issue affects only systems with a guest monitoring process, which\nis linked against libxl, and which is important other than simply for\nthe functioning of one particular guest.  libvirt is one common\ntoolstack affected.  Systems using the `xl` command-line tool should\ngenerally suffer no security-relevant effects.\n\nThe xapi toolstack does not currently link against libxl, and so is\nnot affected."
                }
              ]
            }
          }
        },
        "credit": {
          "credit_data": {
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "This issue was discovered by Olaf Hering."
                }
              ]
            }
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "HVM soft-reset crashes toolstack libxl requires all data structures passed across its public interface to be initialized before use and disposed of afterwards by calling a specific set of functions. Many internal data structures also require this initialize / dispose discipline, but not all of them. When the \"soft reset\" feature was implemented, the libxl__domain_suspend_state structure didn\u0027t require any initialization or disposal. At some point later, an initialization function was introduced for the structure; but the \"soft reset\" path wasn\u0027t refactored to call the initialization function. When a guest nwo initiates a \"soft reboot\", uninitialized data structure leads to an assert() when later code finds the structure in an unexpected state. The effect of this is to crash the process monitoring the guest. How this affects the system depends on the structure of the toolstack. For xl, this will have no security-relevant effect: every VM has its own independent monitoring process, which contains no state. The domain in question will hang in a crashed state, but can be destroyed by `xl destroy` just like any other non-cooperating domain. For daemon-based toolstacks linked against libxl, such as libvirt, this will crash the toolstack, losing the state of any in-progress operations (localized DoS), and preventing further administrator operations unless the daemon is configured to restart automatically (system-wide DoS). If crashes \"leak\" resources, then repeated crashes could use up resources, also causing a system-wide DoS."
            }
          ]
        },
        "impact": {
          "impact_data": {
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "A malicious guest can crash the management daemon, leading to at least\na localized, possibly system-wide denial-of-service."
                }
              ]
            }
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "unknown"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://xenbits.xenproject.org/xsa/advisory-368.txt",
              "refsource": "MISC",
              "url": "https://xenbits.xenproject.org/xsa/advisory-368.txt"
            },
            {
              "name": "GLSA-202107-30",
              "refsource": "GENTOO",
              "url": "https://security.gentoo.org/glsa/202107-30"
            }
          ]
        },
        "workaround": {
          "workaround_data": {
            "description": {
              "description_data": [
                {
                  "lang": "eng",
                  "value": "Ensuring that any management daemons are restarted automatically after\na crash will partially mitigate the issue."
                }
              ]
            }
          }
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "23aa2041-22e1-471f-9209-9b7396fa234f",
    "assignerShortName": "XEN",
    "cveId": "CVE-2021-28687",
    "datePublished": "2021-06-11T14:54:14",
    "dateReserved": "2021-03-18T00:00:00",
    "dateUpdated": "2024-08-03T21:47:33.121Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-28368 (GCVE-0-2020-28368)

Vulnerability from cvelistv5

Published

2020-11-10 18:17

Modified

2024-08-04 16:33

Severity ?

CWE

Summary

Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the guest) via a side-channel attack on a power/energy monitoring interface, aka a "Platypus" attack. NOTE: there is only one logically independent fix: to change the access control for each such interface in Xen.

References

►

URL

Tags

	https://xenbits.xen.org/xsa/advisory-351.html	x_refsource_MISC
	https://platypusattack.com	x_refsource_MISC
	https://www.zdnet.com/article/new-platypus-attack-can-steal-data-from-intel-cpus/	x_refsource_MISC
	http://xenbits.xen.org/xsa/advisory-351.html	x_refsource_CONFIRM
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XV23EZIMNLJN4YXRRXLQV2ALW6ZEALXV/	vendor-advisory, x_refsource_FEDORA
	http://www.openwall.com/lists/oss-security/2020/11/26/1	mailing-list, x_refsource_MLIST
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5J66QUUHXH2RR4CNCKQRGVXVSOUFRPDA/	vendor-advisory, x_refsource_FEDORA
	https://www.debian.org/security/2020/dsa-4804	vendor-advisory, x_refsource_DEBIAN

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T16:33:59.028Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://xenbits.xen.org/xsa/advisory-351.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://platypusattack.com"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.zdnet.com/article/new-platypus-attack-can-steal-data-from-intel-cpus/"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://xenbits.xen.org/xsa/advisory-351.html"
          },
          {
            "name": "FEDORA-2020-2684e0fadd",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XV23EZIMNLJN4YXRRXLQV2ALW6ZEALXV/"
          },
          {
            "name": "[oss-security] 20201126 Xen Security Advisory 351 v2 (CVE-2020-28368) - Information leak via power sidechannel",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2020/11/26/1"
          },
          {
            "name": "FEDORA-2020-d71fa5f0b9",
            "tags": [
              "vendor-advisory",
              "x_refsource_FEDORA",
              "x_transferred"
            ],
            "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5J66QUUHXH2RR4CNCKQRGVXVSOUFRPDA/"
          },
          {
            "name": "DSA-4804",
            "tags": [
              "vendor-advisory",
              "x_refsource_DEBIAN",
              "x_transferred"
            ],
            "url": "https://www.debian.org/security/2020/dsa-4804"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the guest) via a side-channel attack on a power/energy monitoring interface, aka a \"Platypus\" attack. NOTE: there is only one logically independent fix: to change the access control for each such interface in Xen."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-12-05T11:06:11",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://xenbits.xen.org/xsa/advisory-351.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://platypusattack.com"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.zdnet.com/article/new-platypus-attack-can-steal-data-from-intel-cpus/"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://xenbits.xen.org/xsa/advisory-351.html"
        },
        {
          "name": "FEDORA-2020-2684e0fadd",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XV23EZIMNLJN4YXRRXLQV2ALW6ZEALXV/"
        },
        {
          "name": "[oss-security] 20201126 Xen Security Advisory 351 v2 (CVE-2020-28368) - Information leak via power sidechannel",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2020/11/26/1"
        },
        {
          "name": "FEDORA-2020-d71fa5f0b9",
          "tags": [
            "vendor-advisory",
            "x_refsource_FEDORA"
          ],
          "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5J66QUUHXH2RR4CNCKQRGVXVSOUFRPDA/"
        },
        {
          "name": "DSA-4804",
          "tags": [
            "vendor-advisory",
            "x_refsource_DEBIAN"
          ],
          "url": "https://www.debian.org/security/2020/dsa-4804"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2020-28368",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the guest) via a side-channel attack on a power/energy monitoring interface, aka a \"Platypus\" attack. NOTE: there is only one logically independent fix: to change the access control for each such interface in Xen."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://xenbits.xen.org/xsa/advisory-351.html",
              "refsource": "MISC",
              "url": "https://xenbits.xen.org/xsa/advisory-351.html"
            },
            {
              "name": "https://platypusattack.com",
              "refsource": "MISC",
              "url": "https://platypusattack.com"
            },
            {
              "name": "https://www.zdnet.com/article/new-platypus-attack-can-steal-data-from-intel-cpus/",
              "refsource": "MISC",
              "url": "https://www.zdnet.com/article/new-platypus-attack-can-steal-data-from-intel-cpus/"
            },
            {
              "name": "http://xenbits.xen.org/xsa/advisory-351.html",
              "refsource": "CONFIRM",
              "url": "http://xenbits.xen.org/xsa/advisory-351.html"
            },
            {
              "name": "FEDORA-2020-2684e0fadd",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XV23EZIMNLJN4YXRRXLQV2ALW6ZEALXV/"
            },
            {
              "name": "[oss-security] 20201126 Xen Security Advisory 351 v2 (CVE-2020-28368) - Information leak via power sidechannel",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2020/11/26/1"
            },
            {
              "name": "FEDORA-2020-d71fa5f0b9",
              "refsource": "FEDORA",
              "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5J66QUUHXH2RR4CNCKQRGVXVSOUFRPDA/"
            },
            {
              "name": "DSA-4804",
              "refsource": "DEBIAN",
              "url": "https://www.debian.org/security/2020/dsa-4804"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2020-28368",
    "datePublished": "2020-11-10T18:17:29",
    "dateReserved": "2020-11-09T00:00:00",
    "dateUpdated": "2024-08-04T16:33:59.028Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

suse-su-2021:1023-1

Vulnerability from csaf_suse

CVE-2021-3308 (GCVE-0-2021-3308)

Vulnerability from cvelistv5

CVE-2021-20257 (GCVE-0-2021-20257)

Vulnerability from cvelistv5

CVE-2021-28687 (GCVE-0-2021-28687)

Vulnerability from cvelistv5

CVE-2020-28368 (GCVE-0-2020-28368)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature