The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2020:14557-1 advisory.

  - A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while     processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user     within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host,     resulting in a denial of service. (CVE-2020-25723)

  - An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of service     (data corruption), cause a data leak, or possibly gain privileges because an AMD IOMMU page-table entry     can be half-updated. (CVE-2020-27670)

  - An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of     service (data corruption), cause a data leak, or possibly gain privileges because coalescing of per-page     IOMMU TLB flushes is mishandled. (CVE-2020-27671)

  - An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of     service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to     a use-after-free involving 2MiB and 1GiB superpages. (CVE-2020-27672)

  - An issue was discovered in Xen through 4.14.x allowing x86 PV guest OS users to gain guest OS privileges     by modifying kernel memory contents, because invalidation of TLB entries is mishandled during use of an     INVLPG-like attack technique. (CVE-2020-27674)

  - Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from     outside the guest) via a side-channel attack on a power/energy monitoring interface, aka a Platypus     attack. NOTE: there is only one logically independent fix: to change the access control for each such     interface in Xen. (CVE-2020-28368)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLES11 Security Update : xen (SUSE-SU-2020:14557-1)

high Nessus Plugin ID 150513

Version 1.5

Version 1.4

Version 1.5 Dec 19, 2024, 3:15 PM IAVM reference Plugin Feed: 202412191515
Version 1.4 Nov 21, 2022, 10:22 PM IAVM reference Plugin Feed: 202211212222