Test ID:	1.3.6.1.4.1.25623.1.1.4.2015.0940.1
Category:	SuSE Local Security Checks
Title:	SUSE: Security Advisory (SUSE-SU-2015:0940-1)
Summary:	The remote host is missing an update for the 'Xen' package(s) announced via the SUSE-SU-2015:0940-1 advisory.
Description:	Summary: The remote host is missing an update for the 'Xen' package(s) announced via the SUSE-SU-2015:0940-1 advisory. Vulnerability Insight: This update fixes the following security issues in Xen: * CVE-2012-5510: Grant table version switch list corruption vulnerability (XSA-26) * CVE-2012-5511: Several HVM operations do not validate the range of their inputs (XSA-27) * CVE-2012-5513: XENMEM_exchange may overwrite hypervisor memory (XSA-29) * CVE-2012-5514: Missing unlock in guest_physmap_mark_populate_on_demand() (XSA-30) * CVE-2012-5515: Several memory hypercall operations allow invalid extent order values (XSA-31) Also the following fix has been applied: * bnc#777628 - guest 'disappears' after live migration Updated block-dmmd script Security Issues references: * CVE-2012-5513 <[link moved to references]> * CVE-2012-5514 <[link moved to references]> * CVE-2012-5511 <[link moved to references]> * CVE-2012-5510 <[link moved to references]> * CVE-2012-5515 <[link moved to references]> Affected Software/OS: 'Xen' package(s) on SUSE Linux Enterprise Server 11-SP1. Solution: Please install the updated package(s). CVSS Score: 7.7 CVSS Vector: AV:A/AC:L/Au:S/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-5510 51397 http://secunia.com/advisories/51397 51468 http://secunia.com/advisories/51468 51486 http://secunia.com/advisories/51486 51487 http://secunia.com/advisories/51487 55082 http://secunia.com/advisories/55082 56794 http://www.securityfocus.com/bid/56794 88128 http://www.osvdb.org/88128 DSA-2582 http://www.debian.org/security/2012/dsa-2582 GLSA-201309-24 http://security.gentoo.org/glsa/glsa-201309-24.xml SUSE-SU-2012:1615 http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00001.html SUSE-SU-2014:0446 http://lists.opensuse.org/opensuse-security-announce/2014-03/msg00021.html [oss-security] 20121203 Xen Security Advisory 26 (CVE-2012-5510) - Grant table version switch list corruption vulnerability http://www.openwall.com/lists/oss-security/2012/12/03/6 http://support.citrix.com/article/CTX135777 openSUSE-SU-2012:1685 http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00018.html openSUSE-SU-2012:1687 http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00019.html openSUSE-SU-2013:0133 http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00011.html openSUSE-SU-2013:0636 http://lists.opensuse.org/opensuse-updates/2013-04/msg00051.html openSUSE-SU-2013:0637 http://lists.opensuse.org/opensuse-updates/2013-04/msg00052.html xen-grant-table-dos(80478) https://exchange.xforce.ibmcloud.com/vulnerabilities/80478 Common Vulnerability Exposure (CVE) ID: CVE-2012-5511 56796 http://www.securityfocus.com/bid/56796 88129 http://www.osvdb.org/88129 DSA-2636 http://www.debian.org/security/2013/dsa-2636 [oss-security] 20121203 Xen Security Advisory 27 (CVE-2012-5511) - several HVM operations do not validate the range of their inputs http://www.openwall.com/lists/oss-security/2012/12/03/10 xen-hvm-dos(80484) https://exchange.xforce.ibmcloud.com/vulnerabilities/80484 Common Vulnerability Exposure (CVE) ID: CVE-2012-5513 51495 http://secunia.com/advisories/51495 56797 http://www.securityfocus.com/bid/56797 88131 http://www.osvdb.org/88131 RHSA-2012:1540 http://rhn.redhat.com/errata/RHSA-2012-1540.html SUSE-SU-2012:1606 http://lists.opensuse.org/opensuse-security-announce/2012-12/msg00000.html SUSE-SU-2014:0470 http://lists.opensuse.org/opensuse-security-announce/2014-04/msg00000.html [oss-security] 20121203 Xen Security Advisory 29 (CVE-2012-5513) - XENMEM_exchange may overwrite hypervisor memory http://www.openwall.com/lists/oss-security/2012/12/03/11 xen-xenmemexchange-priv-esc(80482) https://exchange.xforce.ibmcloud.com/vulnerabilities/80482 Common Vulnerability Exposure (CVE) ID: CVE-2012-5514 56803 http://www.securityfocus.com/bid/56803 88130 http://www.osvdb.org/88130 [oss-security] 20121203 Xen Security Advisory 30 (CVE-2012-5514) - Broken error handling in guest_physmap_mark_populate_on_demand() http://www.openwall.com/lists/oss-security/2012/12/03/12 xen-guestphysmapmark-dos(80483) https://exchange.xforce.ibmcloud.com/vulnerabilities/80483 Common Vulnerability Exposure (CVE) ID: CVE-2012-5515 56798 http://www.securityfocus.com/bid/56798 88127 http://www.osvdb.org/88127 [Xen-announce] 20121203 Xen Security Advisory 31 (CVE-2012-5515) - Several memory hypercall operations allow invalid extent order values http://lists.xen.org/archives/html/xen-announce/2012-12/msg00001.html [oss-security] 20121203 Xen Security Advisory 31 (CVE-2012-5515) - Several memory hypercall operations allow invalid extent order values http://www.openwall.com/lists/oss-security/2012/12/03/9 xen-extentorder-dos(80479) https://exchange.xforce.ibmcloud.com/vulnerabilities/80479 Common Vulnerability Exposure (CVE) ID: CVE-2013-3495 BugTraq ID: 61854 http://www.securityfocus.com/bid/61854 https://security.gentoo.org/glsa/201504-04 http://www.openwall.com/lists/oss-security/2013/08/20/8 http://osvdb.org/96438 http://www.securitytracker.com/id/1028931 http://secunia.com/advisories/54341 SuSE Security Announcement: openSUSE-SU-2015:0226 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00005.html SuSE Security Announcement: openSUSE-SU-2015:0256 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00010.html Common Vulnerability Exposure (CVE) ID: CVE-2014-4021 BugTraq ID: 68070 http://www.securityfocus.com/bid/68070 Debian Security Information: DSA-3006 (Google Search) http://www.debian.org/security/2014/dsa-3006 http://lists.fedoraproject.org/pipermail/package-announce/2014-July/135071.html http://lists.fedoraproject.org/pipermail/package-announce/2014-July/135068.html http://security.gentoo.org/glsa/glsa-201407-03.xml http://www.securitytracker.com/id/1030442 http://secunia.com/advisories/59208 http://secunia.com/advisories/60027 http://secunia.com/advisories/60130 http://secunia.com/advisories/60471 SuSE Security Announcement: openSUSE-SU-2014:1279 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00002.html SuSE Security Announcement: openSUSE-SU-2014:1281 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2014-10/msg00003.html Common Vulnerability Exposure (CVE) ID: CVE-2014-7154 Debian Security Information: DSA-3041 (Google Search) http://www.debian.org/security/2014/dsa-3041 http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140483.html http://lists.fedoraproject.org/pipermail/package-announce/2014-October/140418.html http://security.gentoo.org/glsa/glsa-201412-42.xml http://www.securitytracker.com/id/1030887 http://secunia.com/advisories/61501 http://secunia.com/advisories/61890 Common Vulnerability Exposure (CVE) ID: CVE-2014-7155 BugTraq ID: 70057 http://www.securityfocus.com/bid/70057 http://www.securitytracker.com/id/1030888 http://secunia.com/advisories/61858 Common Vulnerability Exposure (CVE) ID: CVE-2014-7156 BugTraq ID: 70062 http://www.securityfocus.com/bid/70062 http://www.securitytracker.com/id/1030889 http://secunia.com/advisories/61500 Common Vulnerability Exposure (CVE) ID: CVE-2014-8594 BugTraq ID: 71149 http://www.securityfocus.com/bid/71149 Debian Security Information: DSA-3140 (Google Search) http://www.debian.org/security/2015/dsa-3140 http://secunia.com/advisories/62672 XForce ISS Database: xen-cve20148594-sec-byass(98767) https://exchange.xforce.ibmcloud.com/vulnerabilities/98767 Common Vulnerability Exposure (CVE) ID: CVE-2014-8595 BugTraq ID: 71151 http://www.securityfocus.com/bid/71151 http://secunia.com/advisories/62537 XForce ISS Database: xen-cve20148595-priv-esc(98768) https://exchange.xforce.ibmcloud.com/vulnerabilities/98768 Common Vulnerability Exposure (CVE) ID: CVE-2014-8866 BugTraq ID: 71332 http://www.securityfocus.com/bid/71332 http://secunia.com/advisories/59937 Common Vulnerability Exposure (CVE) ID: CVE-2014-8867 BugTraq ID: 71331 http://www.securityfocus.com/bid/71331 RedHat Security Advisories: RHSA-2015:0783 http://rhn.redhat.com/errata/RHSA-2015-0783.html http://secunia.com/advisories/59949 Common Vulnerability Exposure (CVE) ID: CVE-2014-9030 BugTraq ID: 71207 http://www.securityfocus.com/bid/71207 XForce ISS Database: xen-mmumachphysupdate-dos(98853) https://exchange.xforce.ibmcloud.com/vulnerabilities/98853 Common Vulnerability Exposure (CVE) ID: CVE-2015-3340 BugTraq ID: 74248 http://www.securityfocus.com/bid/74248 Debian Security Information: DSA-3414 (Google Search) http://www.debian.org/security/2015/dsa-3414 http://lists.fedoraproject.org/pipermail/package-announce/2015-April/156005.html http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157006.html http://lists.fedoraproject.org/pipermail/package-announce/2015-May/156979.html https://security.gentoo.org/glsa/201604-03 http://www.securitytracker.com/id/1032158 SuSE Security Announcement: SUSE-SU-2015:0923 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00018.html SuSE Security Announcement: SUSE-SU-2015:0927 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00019.html SuSE Security Announcement: openSUSE-SU-2015:0983 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-06/msg00001.html Common Vulnerability Exposure (CVE) ID: CVE-2015-3456 BugTraq ID: 74640 http://www.securityfocus.com/bid/74640 Debian Security Information: DSA-3259 (Google Search) http://www.debian.org/security/2015/dsa-3259 Debian Security Information: DSA-3262 (Google Search) http://www.debian.org/security/2015/dsa-3262 Debian Security Information: DSA-3274 (Google Search) http://www.debian.org/security/2015/dsa-3274 https://www.exploit-db.com/exploits/37053/ http://lists.fedoraproject.org/pipermail/package-announce/2015-May/158072.html https://security.gentoo.org/glsa/201602-01 https://security.gentoo.org/glsa/201612-27 HPdes Security Advisory: HPSBMU03336 http://marc.info/?l=bugtraq&m=143229451215900&w=2 HPdes Security Advisory: HPSBMU03349 http://marc.info/?l=bugtraq&m=143387998230996&w=2 HPdes Security Advisory: SSRT102076 http://venom.crowdstrike.com/ https://www.arista.com/en/support/advisories-notices/security-advisories/1128-security-advisory-10 RedHat Security Advisories: RHSA-2015:0998 http://rhn.redhat.com/errata/RHSA-2015-0998.html RedHat Security Advisories: RHSA-2015:0999 http://rhn.redhat.com/errata/RHSA-2015-0999.html RedHat Security Advisories: RHSA-2015:1000 http://rhn.redhat.com/errata/RHSA-2015-1000.html RedHat Security Advisories: RHSA-2015:1001 http://rhn.redhat.com/errata/RHSA-2015-1001.html RedHat Security Advisories: RHSA-2015:1002 http://rhn.redhat.com/errata/RHSA-2015-1002.html RedHat Security Advisories: RHSA-2015:1003 http://rhn.redhat.com/errata/RHSA-2015-1003.html RedHat Security Advisories: RHSA-2015:1004 http://rhn.redhat.com/errata/RHSA-2015-1004.html RedHat Security Advisories: RHSA-2015:1011 http://rhn.redhat.com/errata/RHSA-2015-1011.html http://www.securitytracker.com/id/1032306 http://www.securitytracker.com/id/1032311 http://www.securitytracker.com/id/1032917 SuSE Security Announcement: SUSE-SU-2015:0889 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00009.html SuSE Security Announcement: SUSE-SU-2015:0896 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00042.html SuSE Security Announcement: SUSE-SU-2015:0929 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00021.html SuSE Security Announcement: openSUSE-SU-2015:0893 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00013.html SuSE Security Announcement: openSUSE-SU-2015:0894 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00014.html SuSE Security Announcement: openSUSE-SU-2015:1400 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-08/msg00021.html http://www.ubuntu.com/usn/USN-2608-1
Copyright	Copyright (C) 2021 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.