SUSE update for xen

Published: 2022-02-04

Risk	Low
Patch available	YES
Number of vulnerabilities	2
CVE-ID	CVE-2022-23034 CVE-2022-23035
CWE-ID	CWE-191 CWE-459
Exploitation vector	Local
Public exploit	N/A
Vulnerable software	SUSE Linux Enterprise Server for SAP Operating systems & Components / Operating system SUSE Linux Enterprise High Performance Computing Operating systems & Components / Operating system xen-tools-domU-debuginfo Operating systems & Components / Operating system package or component xen-tools-domU Operating systems & Components / Operating system package or component xen-tools-debuginfo Operating systems & Components / Operating system package or component xen-tools Operating systems & Components / Operating system package or component xen-libs-debuginfo Operating systems & Components / Operating system package or component xen-libs Operating systems & Components / Operating system package or component xen-devel Operating systems & Components / Operating system package or component xen-debugsource Operating systems & Components / Operating system package or component xen Operating systems & Components / Operating system package or component
Vendor	SUSE

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Integer underflow

EUVDB-ID: #VU63798

Risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2022-23034

CWE-ID: CWE-191 - Integer underflow

Exploit availability: No

Description

The vulnerability allows a local user can perform a denial of service attack.

The vulnerability exists due to integer underflow when unmapping a grant to address XSA-380. A local user can request two forms of mappings to perform a denial of service attack.

Mitigation

Update the affected package xen to the latest version.

Vulnerable software versions

SUSE Linux Enterprise Server for SAP: 15-SP3

SUSE Linux Enterprise High Performance Computing: 15-ESPOS - 15-LTSS

xen-tools-domU-debuginfo: before 4.10.4_32-3.71.1

xen-tools-domU: before 4.10.4_32-3.71.1

xen-tools-debuginfo: before 4.10.4_32-3.71.1

xen-tools: before 4.10.4_32-3.71.1

xen-libs-debuginfo: before 4.10.4_32-3.71.1

xen-libs: before 4.10.4_32-3.71.1

xen-devel: before 4.10.4_32-3.71.1

xen-debugsource: before 4.10.4_32-3.71.1

xen: before 4.10.4_32-3.71.1

CPE2.3

External links

http://www.suse.com/support/update/announcement/2022/suse-su-20220332-1/

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Incomplete cleanup

EUVDB-ID: #VU63800