SUSE update for xen



Published: 2022-06-16
Risk High
Patch available YES
Number of vulnerabilities 7
CVE-ID CVE-2022-26358
CVE-2022-26359
CVE-2022-26360
CVE-2022-26361
CVE-2022-26362
CVE-2022-26363
CVE-2022-26364
CWE-ID CWE-400
CWE-362
CWE-119
Exploitation vector Network
Public exploit N/A
Vulnerable software
Subscribe 		SUSE Linux Enterprise Micro
Operating systems & Components / Operating system

SUSE Linux Enterprise Desktop
Operating systems & Components / Operating system

openSUSE Leap
Operating systems & Components / Operating system

SUSE Manager Server
Operating systems & Components / Operating system

SUSE Manager Proxy
Operating systems & Components / Operating system

SUSE Linux Enterprise Server for SAP Applications
Operating systems & Components / Operating system

SUSE Linux Enterprise Server
Operating systems & Components / Operating system

SUSE Linux Enterprise High Performance Computing
Operating systems & Components / Operating system

SUSE Linux Enterprise Module for Basesystem
Operating systems & Components / Operating system

SUSE Linux Enterprise Module for Server Applications
Operating systems & Components / Operating system

xen-tools-xendomains-wait-disk
Operating systems & Components / Operating system package or component

xen-libs-32bit-debuginfo
Operating systems & Components / Operating system package or component

xen-libs-32bit
Operating systems & Components / Operating system package or component

xen-tools-domU-debuginfo
Operating systems & Components / Operating system package or component

xen-tools-domU
Operating systems & Components / Operating system package or component

xen-tools-debuginfo
Operating systems & Components / Operating system package or component

xen-tools
Operating systems & Components / Operating system package or component

xen-libs-debuginfo
Operating systems & Components / Operating system package or component

xen-libs
Operating systems & Components / Operating system package or component

xen-doc-html
Operating systems & Components / Operating system package or component

xen-devel
Operating systems & Components / Operating system package or component

xen-debugsource
Operating systems & Components / Operating system package or component

xen
Operating systems & Components / Operating system package or component

Vendor SUSE

Security Bulletin

This security bulletin contains information about 7 vulnerabilities.

1) Resource exhaustion

EUVDB-ID: #VU63439

Risk: Low

CVSSv3.1: 5.7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-26358

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to RMRR (VT-d) and unity map (AMD-Vi) handling issues. A local user can trigger resource exhaustion and perform a denial of service (DoS) attack.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Micro: 5.1 - 5.2

SUSE Linux Enterprise Desktop: 15-SP3

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

SUSE Linux Enterprise Server for SAP Applications: 15-SP3

SUSE Linux Enterprise Server: 15-SP3

SUSE Linux Enterprise High Performance Computing: 15-SP3

SUSE Linux Enterprise Module for Basesystem: 15-SP3

SUSE Linux Enterprise Module for Server Applications: 15-SP3

xen-tools-xendomains-wait-disk: before 4.14.5_02-150300.3.29.1

xen-libs-32bit-debuginfo: before 4.14.5_02-150300.3.29.1

xen-libs-32bit: before 4.14.5_02-150300.3.29.1

xen-tools-domU-debuginfo: before 4.14.5_02-150300.3.29.1

xen-tools-domU: before 4.14.5_02-150300.3.29.1

xen-tools-debuginfo: before 4.14.5_02-150300.3.29.1

xen-tools: before 4.14.5_02-150300.3.29.1

xen-libs-debuginfo: before 4.14.5_02-150300.3.29.1

xen-libs: before 4.14.5_02-150300.3.29.1

xen-doc-html: before 4.14.5_02-150300.3.29.1

xen-devel: before 4.14.5_02-150300.3.29.1

xen-debugsource: before 4.14.5_02-150300.3.29.1

xen: before 4.14.5_02-150300.3.29.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20222065-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Resource exhaustion

EUVDB-ID: #VU63440

Risk: Low

CVSSv3.1: 5.7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-26359

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to RMRR (VT-d) and unity map (AMD-Vi) handling issues. A local user can trigger resource exhaustion and perform a denial of service (DoS) attack.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Micro: 5.1 - 5.2

SUSE Linux Enterprise Desktop: 15-SP3

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

SUSE Linux Enterprise Server for SAP Applications: 15-SP3

SUSE Linux Enterprise Server: 15-SP3

SUSE Linux Enterprise High Performance Computing: 15-SP3

SUSE Linux Enterprise Module for Basesystem: 15-SP3

SUSE Linux Enterprise Module for Server Applications: 15-SP3

xen-tools-xendomains-wait-disk: before 4.14.5_02-150300.3.29.1

xen-libs-32bit-debuginfo: before 4.14.5_02-150300.3.29.1

xen-libs-32bit: before 4.14.5_02-150300.3.29.1

xen-tools-domU-debuginfo: before 4.14.5_02-150300.3.29.1

xen-tools-domU: before 4.14.5_02-150300.3.29.1

xen-tools-debuginfo: before 4.14.5_02-150300.3.29.1

xen-tools: before 4.14.5_02-150300.3.29.1

xen-libs-debuginfo: before 4.14.5_02-150300.3.29.1

xen-libs: before 4.14.5_02-150300.3.29.1

xen-doc-html: before 4.14.5_02-150300.3.29.1

xen-devel: before 4.14.5_02-150300.3.29.1

xen-debugsource: before 4.14.5_02-150300.3.29.1

xen: before 4.14.5_02-150300.3.29.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20222065-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

3) Resource exhaustion

EUVDB-ID: #VU63441

Risk: Low

CVSSv3.1: 5.7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-26360

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to RMRR (VT-d) and unity map (AMD-Vi) handling issues. A local user can trigger resource exhaustion and perform a denial of service (DoS) attack.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Micro: 5.1 - 5.2

SUSE Linux Enterprise Desktop: 15-SP3

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

SUSE Linux Enterprise Server for SAP Applications: 15-SP3

SUSE Linux Enterprise Server: 15-SP3

SUSE Linux Enterprise High Performance Computing: 15-SP3

SUSE Linux Enterprise Module for Basesystem: 15-SP3

SUSE Linux Enterprise Module for Server Applications: 15-SP3

xen-tools-xendomains-wait-disk: before 4.14.5_02-150300.3.29.1

xen-libs-32bit-debuginfo: before 4.14.5_02-150300.3.29.1

xen-libs-32bit: before 4.14.5_02-150300.3.29.1

xen-tools-domU-debuginfo: before 4.14.5_02-150300.3.29.1

xen-tools-domU: before 4.14.5_02-150300.3.29.1

xen-tools-debuginfo: before 4.14.5_02-150300.3.29.1

xen-tools: before 4.14.5_02-150300.3.29.1

xen-libs-debuginfo: before 4.14.5_02-150300.3.29.1

xen-libs: before 4.14.5_02-150300.3.29.1

xen-doc-html: before 4.14.5_02-150300.3.29.1

xen-devel: before 4.14.5_02-150300.3.29.1

xen-debugsource: before 4.14.5_02-150300.3.29.1

xen: before 4.14.5_02-150300.3.29.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20222065-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

4) Resource exhaustion

EUVDB-ID: #VU63442

Risk: Low

CVSSv3.1: 5.7 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-26361

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

Description

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to RMRR (VT-d) and unity map (AMD-Vi) handling issues. A local user can trigger resource exhaustion and perform a denial of service (DoS) attack.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Micro: 5.1 - 5.2

SUSE Linux Enterprise Desktop: 15-SP3

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

SUSE Linux Enterprise Server for SAP Applications: 15-SP3

SUSE Linux Enterprise Server: 15-SP3

SUSE Linux Enterprise High Performance Computing: 15-SP3

SUSE Linux Enterprise Module for Basesystem: 15-SP3

SUSE Linux Enterprise Module for Server Applications: 15-SP3

xen-tools-xendomains-wait-disk: before 4.14.5_02-150300.3.29.1

xen-libs-32bit-debuginfo: before 4.14.5_02-150300.3.29.1

xen-libs-32bit: before 4.14.5_02-150300.3.29.1

xen-tools-domU-debuginfo: before 4.14.5_02-150300.3.29.1

xen-tools-domU: before 4.14.5_02-150300.3.29.1

xen-tools-debuginfo: before 4.14.5_02-150300.3.29.1

xen-tools: before 4.14.5_02-150300.3.29.1

xen-libs-debuginfo: before 4.14.5_02-150300.3.29.1

xen-libs: before 4.14.5_02-150300.3.29.1

xen-doc-html: before 4.14.5_02-150300.3.29.1

xen-devel: before 4.14.5_02-150300.3.29.1

xen-debugsource: before 4.14.5_02-150300.3.29.1

xen: before 4.14.5_02-150300.3.29.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20222065-1/


Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

5) Race condition

EUVDB-ID: #VU64446

Risk: High

CVSSv3.1: 7.1 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-26362

CWE-ID: CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to race condition in typeref acquisition Xen. A remote attacker can execute arbitrary code on the target system.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Micro: 5.1 - 5.2

SUSE Linux Enterprise Desktop: 15-SP3

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

SUSE Linux Enterprise Server for SAP Applications: 15-SP3

SUSE Linux Enterprise Server: 15-SP3

SUSE Linux Enterprise High Performance Computing: 15-SP3

SUSE Linux Enterprise Module for Basesystem: 15-SP3

SUSE Linux Enterprise Module for Server Applications: 15-SP3

xen-tools-xendomains-wait-disk: before 4.14.5_02-150300.3.29.1

xen-libs-32bit-debuginfo: before 4.14.5_02-150300.3.29.1

xen-libs-32bit: before 4.14.5_02-150300.3.29.1

xen-tools-domU-debuginfo: before 4.14.5_02-150300.3.29.1

xen-tools-domU: before 4.14.5_02-150300.3.29.1

xen-tools-debuginfo: before 4.14.5_02-150300.3.29.1

xen-tools: before 4.14.5_02-150300.3.29.1

xen-libs-debuginfo: before 4.14.5_02-150300.3.29.1

xen-libs: before 4.14.5_02-150300.3.29.1

xen-doc-html: before 4.14.5_02-150300.3.29.1

xen-devel: before 4.14.5_02-150300.3.29.1

xen-debugsource: before 4.14.5_02-150300.3.29.1

xen: before 4.14.5_02-150300.3.29.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20222065-1/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

6) Buffer overflow

EUVDB-ID: #VU64448

Risk: High

CVSSv3.1: 7.1 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-26363

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to insufficient care with non-coherent mappings. A remote attacker can pass a specially crafted data and trigger memory corruption and execute arbitrary code on the target system.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Micro: 5.1 - 5.2

SUSE Linux Enterprise Desktop: 15-SP3

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

SUSE Linux Enterprise Server for SAP Applications: 15-SP3

SUSE Linux Enterprise Server: 15-SP3

SUSE Linux Enterprise High Performance Computing: 15-SP3

SUSE Linux Enterprise Module for Basesystem: 15-SP3

SUSE Linux Enterprise Module for Server Applications: 15-SP3

xen-tools-xendomains-wait-disk: before 4.14.5_02-150300.3.29.1

xen-libs-32bit-debuginfo: before 4.14.5_02-150300.3.29.1

xen-libs-32bit: before 4.14.5_02-150300.3.29.1

xen-tools-domU-debuginfo: before 4.14.5_02-150300.3.29.1

xen-tools-domU: before 4.14.5_02-150300.3.29.1

xen-tools-debuginfo: before 4.14.5_02-150300.3.29.1

xen-tools: before 4.14.5_02-150300.3.29.1

xen-libs-debuginfo: before 4.14.5_02-150300.3.29.1

xen-libs: before 4.14.5_02-150300.3.29.1

xen-doc-html: before 4.14.5_02-150300.3.29.1

xen-devel: before 4.14.5_02-150300.3.29.1

xen-debugsource: before 4.14.5_02-150300.3.29.1

xen: before 4.14.5_02-150300.3.29.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20222065-1/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

7) Buffer overflow

EUVDB-ID: #VU64447

Risk: High

CVSSv3.1: 7.1 [CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-26364

CWE-ID: CWE-119 - Memory corruption

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to insufficient care with non-coherent mappings. A remote attacker can pass a specially crafted data and trigger memory corruption and execute arbitrary code on the target system.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Micro: 5.1 - 5.2

SUSE Linux Enterprise Desktop: 15-SP3

openSUSE Leap: 15.3

SUSE Manager Server: 4.2

SUSE Manager Proxy: 4.2

SUSE Linux Enterprise Server for SAP Applications: 15-SP3

SUSE Linux Enterprise Server: 15-SP3

SUSE Linux Enterprise High Performance Computing: 15-SP3

SUSE Linux Enterprise Module for Basesystem: 15-SP3

SUSE Linux Enterprise Module for Server Applications: 15-SP3

xen-tools-xendomains-wait-disk: before 4.14.5_02-150300.3.29.1

xen-libs-32bit-debuginfo: before 4.14.5_02-150300.3.29.1

xen-libs-32bit: before 4.14.5_02-150300.3.29.1

xen-tools-domU-debuginfo: before 4.14.5_02-150300.3.29.1

xen-tools-domU: before 4.14.5_02-150300.3.29.1

xen-tools-debuginfo: before 4.14.5_02-150300.3.29.1

xen-tools: before 4.14.5_02-150300.3.29.1

xen-libs-debuginfo: before 4.14.5_02-150300.3.29.1

xen-libs: before 4.14.5_02-150300.3.29.1

xen-doc-html: before 4.14.5_02-150300.3.29.1

xen-devel: before 4.14.5_02-150300.3.29.1

xen-debugsource: before 4.14.5_02-150300.3.29.1

xen: before 4.14.5_02-150300.3.29.1

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20222065-1/


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.



###SIDEBAR###