suse-su-2023:4476-1
Vulnerability from csaf_suse
Published
2023-11-17 07:05
Modified
2023-11-17 07:05
Summary
Security update for xen
Notes
Title of the patch
Security update for xen
Description of the patch
This update for xen fixes the following issues:
- CVE-2023-20588: AMD CPU transitional execution leak via division by zero (XSA-439) (bsc#1215474).
- CVE-2023-34322: top-level shadow reference dropped too early for 64-bit PV guests (XSA-438) (bsc#1215145).
- CVE-2023-34325: Multiple vulnerabilities in libfsimage disk handling (XSA-443) (bsc#1215747).
- CVE-2023-34326: x86/AMD: missing IOMMU TLB flushing (XSA-442) (bsc#1215746).
- CVE-2023-34327,CVE-2023-34328: x86/AMD: Debug Mask handling (XSA-444) (bsc#1215748).
- CVE-2023-46835: x86/AMD: mismatch in IOMMU quarantine page table levels (XSA-445) (bsc#1216654).
- CVE-2023-46836: x86: BTC/SRSO fixes not fully effective (XSA-446) (bsc#1216807).
- Upstream bug fixes (bsc#1027519)
Patchnames
SUSE-2023-4476,SUSE-SLE-Micro-5.3-2023-4476,SUSE-SLE-Micro-5.4-2023-4476,SUSE-SLE-Module-Basesystem-15-SP4-2023-4476,SUSE-SLE-Module-Server-Applications-15-SP4-2023-4476,openSUSE-Leap-Micro-5.3-2023-4476,openSUSE-Leap-Micro-5.4-2023-4476,openSUSE-SLE-15.4-2023-4476
Terms of use
CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for xen",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for xen fixes the following issues:\n\n- CVE-2023-20588: AMD CPU transitional execution leak via division by zero (XSA-439) (bsc#1215474).\n- CVE-2023-34322: top-level shadow reference dropped too early for 64-bit PV guests (XSA-438) (bsc#1215145).\n- CVE-2023-34325: Multiple vulnerabilities in libfsimage disk handling (XSA-443) (bsc#1215747).\n- CVE-2023-34326: x86/AMD: missing IOMMU TLB flushing (XSA-442) (bsc#1215746).\n- CVE-2023-34327,CVE-2023-34328: x86/AMD: Debug Mask handling (XSA-444) (bsc#1215748).\n- CVE-2023-46835: x86/AMD: mismatch in IOMMU quarantine page table levels (XSA-445) (bsc#1216654).\n- CVE-2023-46836: x86: BTC/SRSO fixes not fully effective (XSA-446) (bsc#1216807). \n\n- Upstream bug fixes (bsc#1027519) \n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2023-4476,SUSE-SLE-Micro-5.3-2023-4476,SUSE-SLE-Micro-5.4-2023-4476,SUSE-SLE-Module-Basesystem-15-SP4-2023-4476,SUSE-SLE-Module-Server-Applications-15-SP4-2023-4476,openSUSE-Leap-Micro-5.3-2023-4476,openSUSE-Leap-Micro-5.4-2023-4476,openSUSE-SLE-15.4-2023-4476",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2023_4476-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2023:4476-1",
"url": "https://www.suse.com/support/update/announcement/2023/suse-su-20234476-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2023:4476-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2023-November/017058.html"
},
{
"category": "self",
"summary": "SUSE Bug 1027519",
"url": "https://bugzilla.suse.com/1027519"
},
{
"category": "self",
"summary": "SUSE Bug 1215145",
"url": "https://bugzilla.suse.com/1215145"
},
{
"category": "self",
"summary": "SUSE Bug 1215474",
"url": "https://bugzilla.suse.com/1215474"
},
{
"category": "self",
"summary": "SUSE Bug 1215746",
"url": "https://bugzilla.suse.com/1215746"
},
{
"category": "self",
"summary": "SUSE Bug 1215747",
"url": "https://bugzilla.suse.com/1215747"
},
{
"category": "self",
"summary": "SUSE Bug 1215748",
"url": "https://bugzilla.suse.com/1215748"
},
{
"category": "self",
"summary": "SUSE Bug 1216654",
"url": "https://bugzilla.suse.com/1216654"
},
{
"category": "self",
"summary": "SUSE Bug 1216807",
"url": "https://bugzilla.suse.com/1216807"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-20588 page",
"url": "https://www.suse.com/security/cve/CVE-2023-20588/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-34322 page",
"url": "https://www.suse.com/security/cve/CVE-2023-34322/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-34325 page",
"url": "https://www.suse.com/security/cve/CVE-2023-34325/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-34326 page",
"url": "https://www.suse.com/security/cve/CVE-2023-34326/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-34327 page",
"url": "https://www.suse.com/security/cve/CVE-2023-34327/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-34328 page",
"url": "https://www.suse.com/security/cve/CVE-2023-34328/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-46835 page",
"url": "https://www.suse.com/security/cve/CVE-2023-46835/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-46836 page",
"url": "https://www.suse.com/security/cve/CVE-2023-46836/"
}
],
"title": "Security update for xen",
"tracking": {
"current_release_date": "2023-11-17T07:05:47Z",
"generator": {
"date": "2023-11-17T07:05:47Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2023:4476-1",
"initial_release_date": "2023-11-17T07:05:47Z",
"revision_history": [
{
"date": "2023-11-17T07:05:47Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "xen-4.16.5_08-150400.4.40.1.aarch64",
"product": {
"name": "xen-4.16.5_08-150400.4.40.1.aarch64",
"product_id": "xen-4.16.5_08-150400.4.40.1.aarch64"
}
},
{
"category": "product_version",
"name": "xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"product": {
"name": "xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"product_id": "xen-devel-4.16.5_08-150400.4.40.1.aarch64"
}
},
{
"category": "product_version",
"name": "xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"product": {
"name": "xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"product_id": "xen-doc-html-4.16.5_08-150400.4.40.1.aarch64"
}
},
{
"category": "product_version",
"name": "xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"product": {
"name": "xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"product_id": "xen-libs-4.16.5_08-150400.4.40.1.aarch64"
}
},
{
"category": "product_version",
"name": "xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"product": {
"name": "xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"product_id": "xen-tools-4.16.5_08-150400.4.40.1.aarch64"
}
},
{
"category": "product_version",
"name": "xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"product": {
"name": "xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"product_id": "xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "xen-libs-64bit-4.16.5_08-150400.4.40.1.aarch64_ilp32",
"product": {
"name": "xen-libs-64bit-4.16.5_08-150400.4.40.1.aarch64_ilp32",
"product_id": "xen-libs-64bit-4.16.5_08-150400.4.40.1.aarch64_ilp32"
}
}
],
"category": "architecture",
"name": "aarch64_ilp32"
},
{
"branches": [
{
"category": "product_version",
"name": "xen-devel-4.16.5_08-150400.4.40.1.i586",
"product": {
"name": "xen-devel-4.16.5_08-150400.4.40.1.i586",
"product_id": "xen-devel-4.16.5_08-150400.4.40.1.i586"
}
},
{
"category": "product_version",
"name": "xen-libs-4.16.5_08-150400.4.40.1.i586",
"product": {
"name": "xen-libs-4.16.5_08-150400.4.40.1.i586",
"product_id": "xen-libs-4.16.5_08-150400.4.40.1.i586"
}
},
{
"category": "product_version",
"name": "xen-tools-domU-4.16.5_08-150400.4.40.1.i586",
"product": {
"name": "xen-tools-domU-4.16.5_08-150400.4.40.1.i586",
"product_id": "xen-tools-domU-4.16.5_08-150400.4.40.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"product": {
"name": "xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"product_id": "xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch"
}
}
],
"category": "architecture",
"name": "noarch"
},
{
"branches": [
{
"category": "product_version",
"name": "xen-4.16.5_08-150400.4.40.1.x86_64",
"product": {
"name": "xen-4.16.5_08-150400.4.40.1.x86_64",
"product_id": "xen-4.16.5_08-150400.4.40.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"product": {
"name": "xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"product_id": "xen-devel-4.16.5_08-150400.4.40.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"product": {
"name": "xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"product_id": "xen-doc-html-4.16.5_08-150400.4.40.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"product": {
"name": "xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"product_id": "xen-libs-4.16.5_08-150400.4.40.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"product": {
"name": "xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"product_id": "xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"product": {
"name": "xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"product_id": "xen-tools-4.16.5_08-150400.4.40.1.x86_64"
}
},
{
"category": "product_version",
"name": "xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"product": {
"name": "xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"product_id": "xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.3",
"product": {
"name": "SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-micro:5.3"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Micro 5.4",
"product": {
"name": "SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-micro:5.4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Module for Basesystem 15 SP4",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-basesystem:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Server Applications 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Module for Server Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-server-applications:15:sp4"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap Micro 5.3",
"product": {
"name": "openSUSE Leap Micro 5.3",
"product_id": "openSUSE Leap Micro 5.3",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap-micro:5.3"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap Micro 5.4",
"product": {
"name": "openSUSE Leap Micro 5.4",
"product_id": "openSUSE Leap Micro 5.4",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap-micro:5.4"
}
}
},
{
"category": "product_name",
"name": "openSUSE Leap 15.4",
"product": {
"name": "openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4",
"product_identification_helper": {
"cpe": "cpe:/o:opensuse:leap:15.4"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-4.16.5_08-150400.4.40.1.x86_64 as component of SUSE Linux Enterprise Micro 5.3",
"product_id": "SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
},
"product_reference": "xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-4.16.5_08-150400.4.40.1.x86_64 as component of SUSE Linux Enterprise Micro 5.4",
"product_id": "SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
},
"product_reference": "xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-4.16.5_08-150400.4.40.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP4",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
},
"product_reference": "xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64 as component of SUSE Linux Enterprise Module for Basesystem 15 SP4",
"product_id": "SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64"
},
"product_reference": "xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Basesystem 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-4.16.5_08-150400.4.40.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-4.16.5_08-150400.4.40.1.x86_64"
},
"product_reference": "xen-4.16.5_08-150400.4.40.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-4.16.5_08-150400.4.40.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-devel-4.16.5_08-150400.4.40.1.x86_64"
},
"product_reference": "xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-4.16.5_08-150400.4.40.1.x86_64 as component of SUSE Linux Enterprise Module for Server Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-4.16.5_08-150400.4.40.1.x86_64"
},
"product_reference": "xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch as component of SUSE Linux Enterprise Module for Server Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch"
},
"product_reference": "xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Server Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-4.16.5_08-150400.4.40.1.x86_64 as component of openSUSE Leap Micro 5.3",
"product_id": "openSUSE Leap Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
},
"product_reference": "xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"relates_to_product_reference": "openSUSE Leap Micro 5.3"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-4.16.5_08-150400.4.40.1.x86_64 as component of openSUSE Leap Micro 5.4",
"product_id": "openSUSE Leap Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
},
"product_reference": "xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"relates_to_product_reference": "openSUSE Leap Micro 5.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-4.16.5_08-150400.4.40.1.aarch64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.aarch64"
},
"product_reference": "xen-4.16.5_08-150400.4.40.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-4.16.5_08-150400.4.40.1.x86_64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.x86_64"
},
"product_reference": "xen-4.16.5_08-150400.4.40.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-4.16.5_08-150400.4.40.1.aarch64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.aarch64"
},
"product_reference": "xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-devel-4.16.5_08-150400.4.40.1.x86_64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.x86_64"
},
"product_reference": "xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-doc-html-4.16.5_08-150400.4.40.1.aarch64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.aarch64"
},
"product_reference": "xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-doc-html-4.16.5_08-150400.4.40.1.x86_64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.x86_64"
},
"product_reference": "xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-4.16.5_08-150400.4.40.1.aarch64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.aarch64"
},
"product_reference": "xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-4.16.5_08-150400.4.40.1.x86_64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
},
"product_reference": "xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64"
},
"product_reference": "xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-4.16.5_08-150400.4.40.1.aarch64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.aarch64"
},
"product_reference": "xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-4.16.5_08-150400.4.40.1.x86_64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.x86_64"
},
"product_reference": "xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64"
},
"product_reference": "xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64 as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64"
},
"product_reference": "xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 15.4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch as component of openSUSE Leap 15.4",
"product_id": "openSUSE Leap 15.4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch"
},
"product_reference": "xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"relates_to_product_reference": "openSUSE Leap 15.4"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-20588",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-20588"
}
],
"notes": [
{
"category": "general",
"text": "\nA division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality. \n\n\n\n\n\n\n\n",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-20588",
"url": "https://www.suse.com/security/cve/CVE-2023-20588"
},
{
"category": "external",
"summary": "SUSE Bug 1213927 for CVE-2023-20588",
"url": "https://bugzilla.suse.com/1213927"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-11-17T07:05:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-20588"
},
{
"cve": "CVE-2023-34322",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-34322"
}
],
"notes": [
{
"category": "general",
"text": "For migration as well as to work around kernels unaware of L1TF (see\nXSA-273), PV guests may be run in shadow paging mode. Since Xen itself\nneeds to be mapped when PV guests run, Xen and shadowed PV guests run\ndirectly the respective shadow page tables. For 64-bit PV guests this\nmeans running on the shadow of the guest root page table.\n\nIn the course of dealing with shortage of memory in the shadow pool\nassociated with a domain, shadows of page tables may be torn down. This\ntearing down may include the shadow root page table that the CPU in\nquestion is presently running on. While a precaution exists to\nsupposedly prevent the tearing down of the underlying live page table,\nthe time window covered by that precaution isn\u0027t large enough.\n",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-34322",
"url": "https://www.suse.com/security/cve/CVE-2023-34322"
},
{
"category": "external",
"summary": "SUSE Bug 1215145 for CVE-2023-34322",
"url": "https://bugzilla.suse.com/1215145"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.5,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-11-17T07:05:47Z",
"details": "important"
}
],
"title": "CVE-2023-34322"
},
{
"cve": "CVE-2023-34325",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-34325"
}
],
"notes": [
{
"category": "general",
"text": "\n[This CNA information record relates to multiple CVEs; the\ntext explains which aspects/vulnerabilities correspond to which CVE.]\n\nlibfsimage contains parsing code for several filesystems, most of them based on\ngrub-legacy code. libfsimage is used by pygrub to inspect guest disks.\n\nPygrub runs as the same user as the toolstack (root in a priviledged domain).\n\nAt least one issue has been reported to the Xen Security Team that allows an\nattacker to trigger a stack buffer overflow in libfsimage. After further\nanalisys the Xen Security Team is no longer confident in the suitability of\nlibfsimage when run against guest controlled input with super user priviledges.\n\nIn order to not affect current deployments that rely on pygrub patches are\nprovided in the resolution section of the advisory that allow running pygrub in\ndeprivileged mode.\n\nCVE-2023-4949 refers to the original issue in the upstream grub\nproject (\"An attacker with local access to a system (either through a\ndisk or external drive) can present a modified XFS partition to\ngrub-legacy in such a way to exploit a memory corruption in grub\u0027s XFS\nfile system implementation.\") CVE-2023-34325 refers specifically to\nthe vulnerabilities in Xen\u0027s copy of libfsimage, which is decended\nfrom a very old version of grub.\n",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-34325",
"url": "https://www.suse.com/security/cve/CVE-2023-34325"
},
{
"category": "external",
"summary": "SUSE Bug 1215747 for CVE-2023-34325",
"url": "https://bugzilla.suse.com/1215747"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-11-17T07:05:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-34325"
},
{
"cve": "CVE-2023-34326",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-34326"
}
],
"notes": [
{
"category": "general",
"text": "The caching invalidation guidelines from the AMD-Vi specification (48882\u2014Rev\n3.07-PUB\u2014Oct 2022) is incorrect on some hardware, as devices will malfunction\n(see stale DMA mappings) if some fields of the DTE are updated but the IOMMU\nTLB is not flushed.\n\nSuch stale DMA mappings can point to memory ranges not owned by the guest, thus\nallowing access to unindented memory regions.\n",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-34326",
"url": "https://www.suse.com/security/cve/CVE-2023-34326"
},
{
"category": "external",
"summary": "SUSE Bug 1215145 for CVE-2023-34326",
"url": "https://bugzilla.suse.com/1215145"
},
{
"category": "external",
"summary": "SUSE Bug 1215746 for CVE-2023-34326",
"url": "https://bugzilla.suse.com/1215746"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-11-17T07:05:47Z",
"details": "important"
}
],
"title": "CVE-2023-34326"
},
{
"cve": "CVE-2023-34327",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-34327"
}
],
"notes": [
{
"category": "general",
"text": "\n[This CNA information record relates to multiple CVEs; the\ntext explains which aspects/vulnerabilities correspond to which CVE.]\n\nAMD CPUs since ~2014 have extensions to normal x86 debugging functionality.\nXen supports guests using these extensions.\n\nUnfortunately there are errors in Xen\u0027s handling of the guest state, leading\nto denials of service.\n\n 1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of\n a previous vCPUs debug mask state.\n\n 2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT.\n This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock\n up the CPU entirely.\n",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-34327",
"url": "https://www.suse.com/security/cve/CVE-2023-34327"
},
{
"category": "external",
"summary": "SUSE Bug 1215748 for CVE-2023-34327",
"url": "https://bugzilla.suse.com/1215748"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-11-17T07:05:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-34327"
},
{
"cve": "CVE-2023-34328",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-34328"
}
],
"notes": [
{
"category": "general",
"text": "\n[This CNA information record relates to multiple CVEs; the\ntext explains which aspects/vulnerabilities correspond to which CVE.]\n\nAMD CPUs since ~2014 have extensions to normal x86 debugging functionality.\nXen supports guests using these extensions.\n\nUnfortunately there are errors in Xen\u0027s handling of the guest state, leading\nto denials of service.\n\n 1) CVE-2023-34327 - An HVM vCPU can end up operating in the context of\n a previous vCPUs debug mask state.\n\n 2) CVE-2023-34328 - A PV vCPU can place a breakpoint over the live GDT.\n This allows the PV vCPU to exploit XSA-156 / CVE-2015-8104 and lock\n up the CPU entirely.\n",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-34328",
"url": "https://www.suse.com/security/cve/CVE-2023-34328"
},
{
"category": "external",
"summary": "SUSE Bug 1215748 for CVE-2023-34328",
"url": "https://bugzilla.suse.com/1215748"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-11-17T07:05:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-34328"
},
{
"cve": "CVE-2023-46835",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-46835"
}
],
"notes": [
{
"category": "general",
"text": "The current setup of the quarantine page tables assumes that the\nquarantine domain (dom_io) has been initialized with an address width\nof DEFAULT_DOMAIN_ADDRESS_WIDTH (48) and hence 4 page table levels.\n\nHowever dom_io being a PV domain gets the AMD-Vi IOMMU page tables\nlevels based on the maximum (hot pluggable) RAM address, and hence on\nsystems with no RAM above the 512GB mark only 3 page-table levels are\nconfigured in the IOMMU.\n\nOn systems without RAM above the 512GB boundary\namd_iommu_quarantine_init() will setup page tables for the scratch\npage with 4 levels, while the IOMMU will be configured to use 3 levels\nonly, resulting in the last page table directory (PDE) effectively\nbecoming a page table entry (PTE), and hence a device in quarantine\nmode gaining write access to the page destined to be a PDE.\n\nDue to this page table level mismatch, the sink page the device gets\nread/write access to is no longer cleared between device assignment,\npossibly leading to data leaks.\n",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-46835",
"url": "https://www.suse.com/security/cve/CVE-2023-46835"
},
{
"category": "external",
"summary": "SUSE Bug 1216654 for CVE-2023-46835",
"url": "https://bugzilla.suse.com/1216654"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-11-17T07:05:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-46835"
},
{
"cve": "CVE-2023-46836",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-46836"
}
],
"notes": [
{
"category": "general",
"text": "The fixes for XSA-422 (Branch Type Confusion) and XSA-434 (Speculative\nReturn Stack Overflow) are not IRQ-safe. It was believed that the\nmitigations always operated in contexts with IRQs disabled.\n\nHowever, the original XSA-254 fix for Meltdown (XPTI) deliberately left\ninterrupts enabled on two entry paths; one unconditionally, and one\nconditionally on whether XPTI was active.\n\nAs BTC/SRSO and Meltdown affect different CPU vendors, the mitigations\nare not active together by default. Therefore, there is a race\ncondition whereby a malicious PV guest can bypass BTC/SRSO protections\nand launch a BTC/SRSO attack against Xen.\n",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-46836",
"url": "https://www.suse.com/security/cve/CVE-2023-46836"
},
{
"category": "external",
"summary": "SUSE Bug 1216807 for CVE-2023-46836",
"url": "https://bugzilla.suse.com/1216807"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Basesystem 15 SP4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"SUSE Linux Enterprise Module for Server Applications 15 SP4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-devel-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-doc-html-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-32bit-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.aarch64",
"openSUSE Leap 15.4:xen-tools-domU-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap 15.4:xen-tools-xendomains-wait-disk-4.16.5_08-150400.4.40.1.noarch",
"openSUSE Leap Micro 5.3:xen-libs-4.16.5_08-150400.4.40.1.x86_64",
"openSUSE Leap Micro 5.4:xen-libs-4.16.5_08-150400.4.40.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2023-11-17T07:05:47Z",
"details": "moderate"
}
],
"title": "CVE-2023-46836"
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…