SUSE update for xen
| Risk | Low |
| Patch available | YES |
| Number of vulnerabilities | 2 |
| CVE-ID | CVE-2022-23034 CVE-2022-23035 |
| CWE-ID | CWE-191 CWE-459 |
| Exploitation vector | Local |
| Public exploit | N/A |
| Vulnerable software |
SUSE OpenStack Cloud Crowbar Operating systems & Components / Operating system SUSE Linux Enterprise Server for SAP Operating systems & Components / Operating system SUSE Linux Enterprise Server Operating systems & Components / Operating system SUSE OpenStack Cloud Operating systems & Components / Operating system xen-tools-domU-debuginfo Operating systems & Components / Operating system package or component xen-tools-domU Operating systems & Components / Operating system package or component xen-tools-debuginfo Operating systems & Components / Operating system package or component xen-tools Operating systems & Components / Operating system package or component xen-libs-debuginfo Operating systems & Components / Operating system package or component xen-libs-debuginfo-32bit Operating systems & Components / Operating system package or component xen-libs Operating systems & Components / Operating system package or component xen-libs-32bit Operating systems & Components / Operating system package or component xen-doc-html Operating systems & Components / Operating system package or component xen-debugsource Operating systems & Components / Operating system package or component xen Operating systems & Components / Operating system package or component |
| Vendor | SUSE |
Security Bulletin
This security bulletin contains information about 2 vulnerabilities.
1) Integer underflow
EUVDB-ID: #VU63798
Risk: Low
CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-23034
CWE-ID:
CWE-191 - Integer underflow
Exploit availability: No
DescriptionThe vulnerability allows a local user can perform a denial of service attack.
The vulnerability exists due to integer underflow when unmapping a grant to address XSA-380. A local user can request two forms of mappings to perform a denial of service attack.
MitigationUpdate the affected package xen to the latest version.
Vulnerable software versionsSUSE OpenStack Cloud Crowbar: 9
SUSE Linux Enterprise Server for SAP: 12-SP4
SUSE Linux Enterprise Server: 12-SP4-LTSS
SUSE OpenStack Cloud: 9
xen-tools-domU-debuginfo: before 4.11.4_26-2.68.1
xen-tools-domU: before 4.11.4_26-2.68.1
xen-tools-debuginfo: before 4.11.4_26-2.68.1
xen-tools: before 4.11.4_26-2.68.1
xen-libs-debuginfo: before 4.11.4_26-2.68.1
xen-libs-debuginfo-32bit: before 4.11.4_26-2.68.1
xen-libs: before 4.11.4_26-2.68.1
xen-libs-32bit: before 4.11.4_26-2.68.1
xen-doc-html: before 4.11.4_26-2.68.1
xen-debugsource: before 4.11.4_26-2.68.1
xen: before 4.11.4_26-2.68.1
CPE2.3- cpe:2.3:o:suse:suse_openstack_cloud_crowbar:9:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:12-SP4:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:12-SP4-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_openstack_cloud:9:*:*:*:*:*:*:*
- cpe:2.3:a:suse:xen-tools-domu-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:xen-tools-domu:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:xen-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:xen-tools:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:xen-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:xen-libs-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:xen-libs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:xen-libs-32bit:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:xen-doc-html:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:xen-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:xen:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2022/suse-su-20220331-1/
Q & A
Can this vulnerability be exploited remotely?
No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
2) Incomplete cleanup
EUVDB-ID: #VU63800
Risk: Low
CVSSv4.0: 4 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]
CVE-ID: CVE-2022-23035
CWE-ID:
CWE-459 - Incomplete cleanup
Exploit availability: No
DescriptionThe vulnerability allows a local attacker to escalate privileges on the system.
The vulnerability exists due to insufficient cleanup of passed-through device IRQs. An attacker with physical access can cause a Denial of Service (DoS) and escalate privileges on the system.
MitigationUpdate the affected package xen to the latest version.
Vulnerable software versionsSUSE OpenStack Cloud Crowbar: 9
SUSE Linux Enterprise Server for SAP: 12-SP4
SUSE Linux Enterprise Server: 12-SP4-LTSS
SUSE OpenStack Cloud: 9
xen-tools-domU-debuginfo: before 4.11.4_26-2.68.1
xen-tools-domU: before 4.11.4_26-2.68.1
xen-tools-debuginfo: before 4.11.4_26-2.68.1
xen-tools: before 4.11.4_26-2.68.1
xen-libs-debuginfo: before 4.11.4_26-2.68.1
xen-libs-debuginfo-32bit: before 4.11.4_26-2.68.1
xen-libs: before 4.11.4_26-2.68.1
xen-libs-32bit: before 4.11.4_26-2.68.1
xen-doc-html: before 4.11.4_26-2.68.1
xen-debugsource: before 4.11.4_26-2.68.1
xen: before 4.11.4_26-2.68.1
CPE2.3- cpe:2.3:o:suse:suse_openstack_cloud_crowbar:9:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server_for_sap:12-SP4:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_linux_enterprise_server:12-SP4-LTSS:*:*:*:*:*:*:*
- cpe:2.3:o:suse:suse_openstack_cloud:9:*:*:*:*:*:*:*
- cpe:2.3:a:suse:xen-tools-domu-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:xen-tools-domu:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:xen-tools-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:xen-tools:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:xen-libs-debuginfo:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:xen-libs-debuginfo-32bit:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:xen-libs:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:xen-libs-32bit:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:xen-doc-html:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:xen-debugsource:*:*:*:*:*:suse_linux:*:*
- cpe:2.3:a:suse:xen:*:*:*:*:*:suse_linux:*:*
https://www.suse.com/support/update/announcement/2022/suse-su-20220331-1/
Q & A
Can this vulnerability be exploited remotely?
No. The attacker should have physical access to the system in order to successfully exploit this vulnerability.
Is there known malware, which exploits this vulnerability?
No. We are not aware of malware exploiting this vulnerability.
