Xen was updated to fix seven security issues and one non-security bug.

The following vulnerabilities were fixed :

  - CVE-2015-4103: Potential unintended writes to host MSI     message data field via qemu (XSA-128) (bnc#931625)

  - CVE-2015-4104: PCI MSI mask bits inadvertently exposed     to guests (XSA-129) (bnc#931626)

  - CVE-2015-4105: Guest triggerable qemu MSI-X pass-through     error messages (XSA-130) (bnc#931627)

  - CVE-2015-4106: Unmediated PCI register access in qemu     (XSA-131) (bnc#931628)

  - CVE-2015-4163: GNTTABOP_swap_grant_ref operation     misbehavior (XSA-134) (bnc#932790)

  - CVE-2015-3209: heap overflow in qemu pcnet controller     allowing guest to host escape (XSA-135) (bnc#932770)

  - CVE-2015-4164: DoS through iret hypercall handler     (XSA-136) (bnc#932996)

The update package also includes non-security fixes. See advisory for details.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

stubs-32.h is back, so revert to previous behaviour. Heap overflow in QEMU PCNET controller, allowing guest->host escape [XSA-135, CVE-2015-3209]. GNTTABOP_swap_grant_ref operation misbehavior [XSA-134, CVE-2015-4163]. vulnerability in the iret hypercall handler [XSA-136, CVE-2015-4164].

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

KVM was updated to fix two security issues :

CVE-2015-3209: Heap overflow in qemu pcnet controller allowing guest to host escape. (bsc#932770)

CVE-2015-4037: Predictable directory names for smb configuration.
(bsc#932267)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Xen was updated to fix six security issues :

CVE-2015-4103: Potential unintended writes to host MSI message data field via qemu. (XSA-128, bsc#931625)

CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests.
(XSA-129, bsc#931626)

CVE-2015-4105: Guest triggerable qemu MSI-X pass-through error messages. (XSA-130, bsc#931627)

CVE-2015-4106: Unmediated PCI register access in qemu. (XSA-131, bsc#931628)

CVE-2015-3209: heap overflow in qemu pcnet controller allowing guest to host escape. (XSA-135, bsc#932770)

CVE-2015-4164: DoS through iret hypercall handler. (XSA-136, bsc#932996)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

A flaw was found in the way QEMU's AMD PCnet Ethernet emulation handled multi-TMD packets with a length above 4096 bytes. A privileged guest user in a guest with an AMD PCNet ethernet card enabled could potentially use this flaw to execute arbitrary code on the host with the privileges of the hosting QEMU process. (CVE-2015-3209)

KVM must be 'restarted' before this update will take effect. 

Shutdown all KVM virtual machines. 

Either reboot or unload and reload the following kernel modules : kvm, ksm, kvm-intel or kvm-amd. 

Start the KVM virtual machines.

The remote host is affected by the vulnerability described in GLSA-201510-02 (QEMU: Arbitrary code execution)

    Heap-based buffer overflow has been found in QEMU&rsquo;s PCNET controller.
  Impact :

    A remote attacker could execute arbitrary code via a specially crafted       packets.
  Workaround :

    There is no known workaround at this time.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
84146	SUSE SLED12 / SLES12 Security Update : xen (SUSE-SU-2015:1042-1)	Nessus	SuSE Local Security Checks	2015/6/12	2021/1/6	high
84374	Fedora 22 : xen-4.5.0-11.fc22 (2015-10001)	Nessus	Fedora Local Security Checks	2015/6/25	2021/1/11	high
84443	SUSE SLED11 / SLES11 Security Update : KVM (SUSE-SU-2015:1152-1)	Nessus	SuSE Local Security Checks	2015/6/29	2021/1/6	high
84468	SUSE SLES11 Security Update : Xen (SUSE-SU-2015:1156-1)	Nessus	SuSE Local Security Checks	2015/6/30	2021/1/19	high
84538	Scientific Linux Security Update : kvm on SL5.x x86_64 (20150625)	Nessus	Scientific Linux Local Security Checks	2015/7/6	2021/1/14	high
86687	GLSA-201510-02 : QEMU: Arbitrary code execution	Nessus	Gentoo Local Security Checks	2015/11/2	2021/1/11	medium

检测

插件搜索

high

high

high

high

high

medium