SB2017120814 - SUSE Linux update for xen
Published: December 8, 2017
Security Bulletin ID
SB2017120814
Severity
Low
Patch available
YES
Number of vulnerabilities
5
Exploitation vector
Adjecent network
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 5 secuirty vulnerabilities.
1) Out-of-bounds read (CVE-ID: CVE-2017-13672)
The vulnerability allows an adjacent unauthenticated attacker to cause DoS condition on the target system.The weakness exists due to out-of-bounds read. An adjacent attacker can trigger memory corruption and cause the service to crash.
2) Out-of-bounds write (CVE-ID: CVE-2017-15289)
The vulnerability allows an adjacent authenticated attacker to cause DoS condition on the target system.The weakness exists in the mode4and5 write functions in hw/display/cirrus_vga.c due to out-of-bounds write. An adjacent attacker can trigger memory corruption and cause the service to crash via vectors related to dst calculation.
3) Privilege escalation (CVE-ID: CVE-2017-15592)
The vulnerability allows an adjacent attacker to cause DoS conditions or gain elevated privileges on the target system.The weakness exists due to mishandling of self-linear shadow mappings for translated guests. An adjacent attacker can supply self-linear shadow mappings and cause the hypervisor to crash or possibly gain elevated privileges.
4) Resource exhaustion (CVE-ID: CVE-2017-15595)
The vulnerability allows an adjacent attacker to gain elevated privileges or cause DoS conditions on the target system.The weakness exists due to improper input validation. An adjacent attacker can supply specially crafted page-table stacking, trigger unbounded recursion, stack consumption, gain elevated privileges or cause hypervisor crash.
5) Race condition (CVE-ID: CVE-2017-15597)
The vulnerability allows an adjacent administrative attacker to cause DoS condition on the target system.The weakness exists due to a race condition in certain grant copy operations. A local attacker can trigger a memory corruption error in the hypervisor and cause the application to crash.
Successful exploitation of the vulnerability results in denial of service.
Remediation
Install update from vendor's website.