SuSE 11.3 Security Update : Xen (SAT Patch Number 8063)

high Nessus Plugin ID 69297

Language:

Synopsis

The remote SuSE 11 host is missing one or more security updates.

Description

The Xen hypervisor and toolset has been updated to 4.2.2_06 to fix various bugs and security issues :

The following security issues have been addressed :

- Various integer overflows in the ELF loader were fixed.
(XSA-55). (CVE-2013-2194)

- Various pointer dereferences issues in the ELF loader were fixed. (XSA-55). (CVE-2013-2195)

- Various other problems in the ELF loader were fixed.
(XSA-55). (CVE-2013-2196)

- A Hypervisor crash due to missing exception recovery on XSETBV was fixed. (XSA-54). (CVE-2013-2078)

- A Hypervisor crash due to missing exception recovery on XRSTOR was fixed. (XSA-53). (CVE-2013-2077)

- libxl allowed guest write access to sensitive console related xenstore keys. (XSA-57). (CVE-2013-2211)

- An information leak on XSAVE/XRSTOR capable AMD CPUs (XSA-52) was fixed, where parts of this state could leak to other VMs. (CVE-2013-2076)

Also the following bugs have been fixed :

- performance issues in mirror lvm. (bnc#801663)

- aacraid driver panics mapping INT A when booting kernel-xen. (bnc#808085)

- Fully Virtualized Windows VM install failed on Ivy Bridge platforms with Xen kernel. (bnc#808269)

- Did not boot with i915 graphics controller with VT-d enabled (bnc#817210)

Solution

Apply SAT patch number 8063.

Plugin Details

Severity: High

ID: 69297

File Name: suse_11_xen-201307-130714.nasl

Version: 1.9

Type: local

Agent: unix

Family: SuSE Local Security Checks

Published: 8/10/2013

Updated: 1/19/2021

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.0

CVSS v2

Risk Factor: High

Base Score: 7.4

Vector: CVSS2#AV:A/AC:M/Au:S/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:novell:suse_linux:11:xen-kmp-pae, p-cpe:/a:novell:suse_linux:11:xen-libs, p-cpe:/a:novell:suse_linux:11:xen-libs-32bit, p-cpe:/a:novell:suse_linux:11:xen, p-cpe:/a:novell:suse_linux:11:xen-doc-html, p-cpe:/a:novell:suse_linux:11:xen-doc-pdf, p-cpe:/a:novell:suse_linux:11:xen-kmp-default, p-cpe:/a:novell:suse_linux:11:xen-tools, p-cpe:/a:novell:suse_linux:11:xen-tools-domu, cpe:/o:novell:suse_linux:11

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Patch Publication Date: 7/14/2013

Reference Information

CVE: CVE-2013-2076, CVE-2013-2077, CVE-2013-2078, CVE-2013-2194, CVE-2013-2195, CVE-2013-2196, CVE-2013-2211

Detections

Analytics