The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:1102-1 advisory.

  - Information exposure through microarchitectural state after transient execution from some register files     for some Intel(R) Atom(R) Processors may allow an authenticated user to potentially enable information     disclosure via local access. (CVE-2023-28746)

  - Recent x86 CPUs offer functionality named Control-flow Enforcement Technology (CET). A sub-feature of this     are Shadow Stacks (CET-SS). CET-SS is a hardware feature designed to protect against Return Oriented     Programming attacks. When enabled, traditional stacks holding both data and return addresses are     accompanied by so called shadow stacks, holding little more than return addresses. Shadow stacks aren't     writable by normal instructions, and upon function returns their contents are used to check for possible     manipulation of a return address coming from the traditional stack. In particular certain memory accesses     need intercepting by Xen. In various cases the necessary emulation involves kind of replaying of the     instruction. Such replaying typically involves filling and then invoking of a stub. Such a replayed     instruction may raise an exceptions, which is expected and dealt with accordingly. Unfortunately the     interaction of both of the above wasn't right: Recovery involves removal of a call frame from the     (traditional) stack. The counterpart of this operation for the shadow stack was missing. (CVE-2023-46841)

  - A Speculative Race Condition (SRC) vulnerability that impacts modern CPU architectures supporting     speculative execution (related to Spectre V1) has been disclosed. An unauthenticated attacker can exploit     this vulnerability to disclose arbitrary data from the CPU using race conditions to access the speculative     executable code paths. (CVE-2024-2193)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : xen (SUSE-SU-2024:1102-1)

medium Nessus Plugin ID 193062

Version 1.1

Version 1.0

Version 1.1 Jul 19, 2024, 12:17 PM IAVM reference Plugin Feed: 202407191217
Version 1.0 Apr 9, 2024, 10:47 AM New Plugin Feed: 202404091047