SUSE update for xen



Risk Low
Patch available YES
Number of vulnerabilities 9
CVE-ID CVE-2021-26401
CVE-2022-0001
CVE-2022-0002
CVE-2022-26356
CVE-2022-26357
CVE-2022-26358
CVE-2022-26359
CVE-2022-26360
CVE-2022-26361
CWE-ID CWE-200
CWE-401
CWE-362
CWE-400
Exploitation vector Local
Public exploit N/A
Vulnerable software
 SUSE OpenStack Cloud Crowbar
Operating systems & Components / Operating system

SUSE Linux Enterprise Server for SAP
Operating systems & Components / Operating system

HPE Helion Openstack
Operating systems & Components / Operating system

SUSE Linux Enterprise Server
Operating systems & Components / Operating system

SUSE OpenStack Cloud
Operating systems & Components / Operating system

xen-tools-domU-debuginfo
Operating systems & Components / Operating system package or component

xen-tools-domU
Operating systems & Components / Operating system package or component

xen-tools-debuginfo
Operating systems & Components / Operating system package or component

xen-tools
Operating systems & Components / Operating system package or component

xen-libs-debuginfo
Operating systems & Components / Operating system package or component

xen-libs-debuginfo-32bit
Operating systems & Components / Operating system package or component

xen-libs
Operating systems & Components / Operating system package or component

xen-libs-32bit
Operating systems & Components / Operating system package or component

xen-doc-html
Operating systems & Components / Operating system package or component

xen-debugsource
Operating systems & Components / Operating system package or component

xen
Operating systems & Components / Operating system package or component

Vendor SUSE

Security Bulletin

This security bulletin contains information about 9 vulnerabilities.

1) Information disclosure

EUVDB-ID: #VU61566

Risk: Low

CVSSv4.0: 1.9 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-26401

CWE-ID: CWE-200 - Exposure of sensitive information to an unauthorized actor

Exploit availability: No

Description

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to excessive data output by the application within LFENCE/JMP. A local user can gain unauthorized access to sensitive information on the system.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE OpenStack Cloud Crowbar: 8

SUSE Linux Enterprise Server for SAP: 12-SP3

HPE Helion Openstack: 8

SUSE Linux Enterprise Server: 12-SP3-BCL - 12-SP3-LTSS

SUSE OpenStack Cloud: 8

xen-tools-domU-debuginfo: before 4.9.4_28-3.103.1

xen-tools-domU: before 4.9.4_28-3.103.1

xen-tools-debuginfo: before 4.9.4_28-3.103.1

xen-tools: before 4.9.4_28-3.103.1

xen-libs-debuginfo: before 4.9.4_28-3.103.1

xen-libs-debuginfo-32bit: before 4.9.4_28-3.103.1

xen-libs: before 4.9.4_28-3.103.1

xen-libs-32bit: before 4.9.4_28-3.103.1

xen-doc-html: before 4.9.4_28-3.103.1

xen-debugsource: before 4.9.4_28-3.103.1

xen: before 4.9.4_28-3.103.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2022/suse-su-20221408-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Information disclosure

EUVDB-ID: #VU61198

Risk: Low

CVSSv4.0: 1.9 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-0001

CWE-ID: CWE-200 - Exposure of sensitive information to an unauthorized actor

Exploit availability: No

Description

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to non-transparent sharing of branch predictor selectors between contexts. A local user can gain unauthorized access to sensitive information on the system.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE OpenStack Cloud Crowbar: 8

SUSE Linux Enterprise Server for SAP: 12-SP3

HPE Helion Openstack: 8

SUSE Linux Enterprise Server: 12-SP3-BCL - 12-SP3-LTSS

SUSE OpenStack Cloud: 8

xen-tools-domU-debuginfo: before 4.9.4_28-3.103.1

xen-tools-domU: before 4.9.4_28-3.103.1

xen-tools-debuginfo: before 4.9.4_28-3.103.1

xen-tools: before 4.9.4_28-3.103.1

xen-libs-debuginfo: before 4.9.4_28-3.103.1

xen-libs-debuginfo-32bit: before 4.9.4_28-3.103.1

xen-libs: before 4.9.4_28-3.103.1

xen-libs-32bit: before 4.9.4_28-3.103.1

xen-doc-html: before 4.9.4_28-3.103.1

xen-debugsource: before 4.9.4_28-3.103.1

xen: before 4.9.4_28-3.103.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2022/suse-su-20221408-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Information disclosure

EUVDB-ID: #VU61199

Risk: Low

CVSSv4.0: 1.9 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-0002

CWE-ID: CWE-200 - Exposure of sensitive information to an unauthorized actor

Exploit availability: No

Description

The vulnerability allows a local user to gain access to potentially sensitive information.

The vulnerability exists due to non-transparent sharing of branch predictor within a context. A local user can gain unauthorized access to sensitive information on the system.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE OpenStack Cloud Crowbar: 8

SUSE Linux Enterprise Server for SAP: 12-SP3

HPE Helion Openstack: 8

SUSE Linux Enterprise Server: 12-SP3-BCL - 12-SP3-LTSS

SUSE OpenStack Cloud: 8

xen-tools-domU-debuginfo: before 4.9.4_28-3.103.1

xen-tools-domU: before 4.9.4_28-3.103.1

xen-tools-debuginfo: before 4.9.4_28-3.103.1

xen-tools: before 4.9.4_28-3.103.1

xen-libs-debuginfo: before 4.9.4_28-3.103.1

xen-libs-debuginfo-32bit: before 4.9.4_28-3.103.1

xen-libs: before 4.9.4_28-3.103.1

xen-libs-32bit: before 4.9.4_28-3.103.1

xen-doc-html: before 4.9.4_28-3.103.1

xen-debugsource: before 4.9.4_28-3.103.1

xen: before 4.9.4_28-3.103.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2022/suse-su-20221408-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Memory leak

EUVDB-ID: #VU63435

Risk: Low

CVSSv4.0: 4.3 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-26356

CWE-ID: CWE-401 - Missing release of memory after effective lifetime

Exploit availability: No

Description

The vulnerability allows a local user to perform DoS attack on the target system.

The vulnerability exists due to racy interactions between dirty vram tracking and paging log dirty hypercalls. A local user can force the application to leak memory and perform denial of service attack.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE OpenStack Cloud Crowbar: 8

SUSE Linux Enterprise Server for SAP: 12-SP3

HPE Helion Openstack: 8

SUSE Linux Enterprise Server: 12-SP3-BCL - 12-SP3-LTSS

SUSE OpenStack Cloud: 8

xen-tools-domU-debuginfo: before 4.9.4_28-3.103.1

xen-tools-domU: before 4.9.4_28-3.103.1

xen-tools-debuginfo: before 4.9.4_28-3.103.1

xen-tools: before 4.9.4_28-3.103.1

xen-libs-debuginfo: before 4.9.4_28-3.103.1

xen-libs-debuginfo-32bit: before 4.9.4_28-3.103.1

xen-libs: before 4.9.4_28-3.103.1

xen-libs-32bit: before 4.9.4_28-3.103.1

xen-doc-html: before 4.9.4_28-3.103.1

xen-debugsource: before 4.9.4_28-3.103.1

xen: before 4.9.4_28-3.103.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2022/suse-su-20221408-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Race condition

EUVDB-ID: #VU63438

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2022-26357

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a race condition in the VT-d domain ID cleanup. A local user can exploit the race and gain unauthorized access to sensitive information and escalate privileges on the system.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE OpenStack Cloud Crowbar: 8

SUSE Linux Enterprise Server for SAP: 12-SP3

HPE Helion Openstack: 8

SUSE Linux Enterprise Server: 12-SP3-BCL - 12-SP3-LTSS

SUSE OpenStack Cloud: 8

xen-tools-domU-debuginfo: before 4.9.4_28-3.103.1

xen-tools-domU: before 4.9.4_28-3.103.1

xen-tools-debuginfo: before 4.9.4_28-3.103.1

xen-tools: before 4.9.4_28-3.103.1

xen-libs-debuginfo: before 4.9.4_28-3.103.1

xen-libs-debuginfo-32bit: before 4.9.4_28-3.103.1

xen-libs: before 4.9.4_28-3.103.1

xen-libs-32bit: before 4.9.4_28-3.103.1

xen-doc-html: before 4.9.4_28-3.103.1

xen-debugsource: before 4.9.4_28-3.103.1

xen: before 4.9.4_28-3.103.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2022/suse-su-20221408-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Resource exhaustion

EUVDB-ID: #VU63439

Risk: Low

CVSSv4.0: 5.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:U/U:Clear]

CVE-ID: CVE-2022-26358

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to RMRR (VT-d) and unity map (AMD-Vi) handling issues. A local user can trigger resource exhaustion and perform a denial of service (DoS) attack.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE OpenStack Cloud Crowbar: 8

SUSE Linux Enterprise Server for SAP: 12-SP3

HPE Helion Openstack: 8

SUSE Linux Enterprise Server: 12-SP3-BCL - 12-SP3-LTSS

SUSE OpenStack Cloud: 8

xen-tools-domU-debuginfo: before 4.9.4_28-3.103.1

xen-tools-domU: before 4.9.4_28-3.103.1

xen-tools-debuginfo: before 4.9.4_28-3.103.1

xen-tools: before 4.9.4_28-3.103.1

xen-libs-debuginfo: before 4.9.4_28-3.103.1

xen-libs-debuginfo-32bit: before 4.9.4_28-3.103.1

xen-libs: before 4.9.4_28-3.103.1

xen-libs-32bit: before 4.9.4_28-3.103.1

xen-doc-html: before 4.9.4_28-3.103.1

xen-debugsource: before 4.9.4_28-3.103.1

xen: before 4.9.4_28-3.103.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2022/suse-su-20221408-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Resource exhaustion

EUVDB-ID: #VU63440

Risk: Low

CVSSv4.0: 5.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:U/U:Clear]

CVE-ID: CVE-2022-26359

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to RMRR (VT-d) and unity map (AMD-Vi) handling issues. A local user can trigger resource exhaustion and perform a denial of service (DoS) attack.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE OpenStack Cloud Crowbar: 8

SUSE Linux Enterprise Server for SAP: 12-SP3

HPE Helion Openstack: 8

SUSE Linux Enterprise Server: 12-SP3-BCL - 12-SP3-LTSS

SUSE OpenStack Cloud: 8

xen-tools-domU-debuginfo: before 4.9.4_28-3.103.1

xen-tools-domU: before 4.9.4_28-3.103.1

xen-tools-debuginfo: before 4.9.4_28-3.103.1

xen-tools: before 4.9.4_28-3.103.1

xen-libs-debuginfo: before 4.9.4_28-3.103.1

xen-libs-debuginfo-32bit: before 4.9.4_28-3.103.1

xen-libs: before 4.9.4_28-3.103.1

xen-libs-32bit: before 4.9.4_28-3.103.1

xen-doc-html: before 4.9.4_28-3.103.1

xen-debugsource: before 4.9.4_28-3.103.1

xen: before 4.9.4_28-3.103.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2022/suse-su-20221408-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

8) Resource exhaustion

EUVDB-ID: #VU63441

Risk: Low

CVSSv4.0: 5.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:U/U:Clear]

CVE-ID: CVE-2022-26360

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to RMRR (VT-d) and unity map (AMD-Vi) handling issues. A local user can trigger resource exhaustion and perform a denial of service (DoS) attack.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE OpenStack Cloud Crowbar: 8

SUSE Linux Enterprise Server for SAP: 12-SP3

HPE Helion Openstack: 8

SUSE Linux Enterprise Server: 12-SP3-BCL - 12-SP3-LTSS

SUSE OpenStack Cloud: 8

xen-tools-domU-debuginfo: before 4.9.4_28-3.103.1

xen-tools-domU: before 4.9.4_28-3.103.1

xen-tools-debuginfo: before 4.9.4_28-3.103.1

xen-tools: before 4.9.4_28-3.103.1

xen-libs-debuginfo: before 4.9.4_28-3.103.1

xen-libs-debuginfo-32bit: before 4.9.4_28-3.103.1

xen-libs: before 4.9.4_28-3.103.1

xen-libs-32bit: before 4.9.4_28-3.103.1

xen-doc-html: before 4.9.4_28-3.103.1

xen-debugsource: before 4.9.4_28-3.103.1

xen: before 4.9.4_28-3.103.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2022/suse-su-20221408-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

9) Resource exhaustion

EUVDB-ID: #VU63442

Risk: Low

CVSSv4.0: 5.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H/E:U/U:Clear]

CVE-ID: CVE-2022-26361

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to RMRR (VT-d) and unity map (AMD-Vi) handling issues. A local user can trigger resource exhaustion and perform a denial of service (DoS) attack.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE OpenStack Cloud Crowbar: 8

SUSE Linux Enterprise Server for SAP: 12-SP3

HPE Helion Openstack: 8

SUSE Linux Enterprise Server: 12-SP3-BCL - 12-SP3-LTSS

SUSE OpenStack Cloud: 8

xen-tools-domU-debuginfo: before 4.9.4_28-3.103.1

xen-tools-domU: before 4.9.4_28-3.103.1

xen-tools-debuginfo: before 4.9.4_28-3.103.1

xen-tools: before 4.9.4_28-3.103.1

xen-libs-debuginfo: before 4.9.4_28-3.103.1

xen-libs-debuginfo-32bit: before 4.9.4_28-3.103.1

xen-libs: before 4.9.4_28-3.103.1

xen-libs-32bit: before 4.9.4_28-3.103.1

xen-doc-html: before 4.9.4_28-3.103.1

xen-debugsource: before 4.9.4_28-3.103.1

xen: before 4.9.4_28-3.103.1

CPE2.3 External links

https://www.suse.com/support/update/announcement/2022/suse-su-20221408-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###