CVE-2013-4355

Upstream information

CVE-2013-4355 at MITRE

Description

Xen 4.3.x and earlier does not properly handle certain errors, which allows local HVM guests to obtain hypervisor stack memory via a (1) port or (2) memory mapped I/O write or (3) other unspecified operations related to addresses without associated memory.

---

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v2 Scores

	National Vulnerability Database
Base Score	1.5
Vector	AV:L/AC:M/Au:S/C:P/I:N/A:N
Access Vector	Local
Access Complexity	Medium
Authentication	Single
Confidentiality Impact	Partial
Integrity Impact	None
Availability Impact	None

SUSE Bugzilla entry: 840592 [RESOLVED / FIXED]

SUSE Security Advisories:

• SUSE-SU-2013:1735-1, published Tue Nov 19 10:04:21 MST 2013
• SUSE-SU-2013:1774-1, published Wed Nov 27 09:04:10 MST 2013
• SUSE-SU-2014:0411-1, published Thu, 20 Mar 2014 13:04:14 +0100 (CET)
• SUSE-SU-2014:0446-1, published Tue, 25 Mar 2014 23:04:15 +0100 (CET)
• SUSE-SU-2014:0470-1, published Tue, 1 Apr 2014 20:04:15 +0200 (CEST)
• openSUSE-SU-2013:1636-1, published Thu, 7 Nov 2013 12:04:36 +0100 (CET)
• openSUSE-SU-2013:1953-1, published Wed, 25 Dec 2013 18:04:32 +0100 (CET)

List of released packages

Product(s)	Fixed package version(s)	References
SUSE Linux Enterprise Desktop 11 SP2	xen >= 4.1.6_02-0.5.1 xen-doc-html >= 4.1.6_02-0.5.1 xen-doc-pdf >= 4.1.6_02-0.5.1 xen-kmp-default >= 4.1.6_02_3.0.93_0.5-0.5.1 xen-kmp-pae >= 4.1.6_02_3.0.93_0.5-0.5.1 xen-kmp-trace >= 4.1.6_02_3.0.93_0.5-0.5.1 xen-libs >= 4.1.6_02-0.5.1 xen-libs-32bit >= 4.1.6_02-0.5.1 xen-tools >= 4.1.6_02-0.5.1 xen-tools-domU >= 4.1.6_02-0.5.1	Patchnames: sledsp2-xen-201310
SUSE Linux Enterprise Desktop 11 SP3	xen >= 4.2.3_02-0.7.1 xen-doc-html >= 4.2.3_02-0.7.1 xen-doc-pdf >= 4.2.3_02-0.7.1 xen-kmp-default >= 4.2.3_02_3.0.93_0.8-0.7.1 xen-kmp-pae >= 4.2.3_02_3.0.93_0.8-0.7.1 xen-libs >= 4.2.3_02-0.7.1 xen-libs-32bit >= 4.2.3_02-0.7.1 xen-tools >= 4.2.3_02-0.7.1 xen-tools-domU >= 4.2.3_02-0.7.1	Patchnames: sledsp3-xen-201310
SUSE Linux Enterprise Desktop 12	xen >= 4.4.1_06-2.2 xen-kmp-default >= 4.4.1_06_k3.12.28_4-2.2 xen-libs >= 4.4.1_06-2.2 xen-libs-32bit >= 4.4.1_06-2.2	Patchnames: SUSE Linux Enterprise Desktop 12 GA xen
SUSE Linux Enterprise Desktop 12 SP1	xen >= 4.5.1_12-2.3 xen-kmp-default >= 4.5.1_12_k3.12.49_11-2.3 xen-libs >= 4.5.1_12-2.3 xen-libs-32bit >= 4.5.1_12-2.3	Patchnames: SUSE Linux Enterprise Desktop 12 SP1 GA xen
SUSE Linux Enterprise Desktop 12 SP2	xen >= 4.7.0_12-23.4 xen-libs >= 4.7.0_12-23.4 xen-libs-32bit >= 4.7.0_12-23.4	Patchnames: SUSE Linux Enterprise Desktop 12 SP2 GA xen
SUSE Linux Enterprise Desktop 12 SP3	xen >= 4.9.0_08-2.2 xen-libs >= 4.9.0_08-2.2 xen-libs-32bit >= 4.9.0_08-2.2	Patchnames: SUSE Linux Enterprise Desktop 12 SP3 GA xen
SUSE Linux Enterprise Server 11 SP1-LTSS	xen >= 4.0.3_21548_16-0.5.1 xen-doc-html >= 4.0.3_21548_16-0.5.1 xen-doc-pdf >= 4.0.3_21548_16-0.5.1 xen-kmp-default >= 4.0.3_21548_16_2.6.32.59_0.9-0.5.1 xen-kmp-pae >= 4.0.3_21548_16_2.6.32.59_0.9-0.5.1 xen-kmp-trace >= 4.0.3_21548_16_2.6.32.59_0.9-0.5.1 xen-libs >= 4.0.3_21548_16-0.5.1 xen-tools >= 4.0.3_21548_16-0.5.1 xen-tools-domU >= 4.0.3_21548_16-0.5.1	Patchnames: slessp1-xen-201402
SUSE Linux Enterprise Server 11 SP2	xen >= 4.1.6_02-0.5.1 xen-doc-html >= 4.1.6_02-0.5.1 xen-doc-pdf >= 4.1.6_02-0.5.1 xen-kmp-default >= 4.1.6_02_3.0.93_0.5-0.5.1 xen-kmp-pae >= 4.1.6_02_3.0.93_0.5-0.5.1 xen-kmp-trace >= 4.1.6_02_3.0.93_0.5-0.5.1 xen-libs >= 4.1.6_02-0.5.1 xen-libs-32bit >= 4.1.6_02-0.5.1 xen-tools >= 4.1.6_02-0.5.1 xen-tools-domU >= 4.1.6_02-0.5.1	Patchnames: slessp2-xen-201310
SUSE Linux Enterprise Server 11 SP3	xen >= 4.2.3_02-0.7.1 xen-doc-html >= 4.2.3_02-0.7.1 xen-doc-pdf >= 4.2.3_02-0.7.1 xen-kmp-default >= 4.2.3_02_3.0.93_0.8-0.7.1 xen-kmp-pae >= 4.2.3_02_3.0.93_0.8-0.7.1 xen-libs >= 4.2.3_02-0.7.1 xen-libs-32bit >= 4.2.3_02-0.7.1 xen-tools >= 4.2.3_02-0.7.1 xen-tools-domU >= 4.2.3_02-0.7.1	Patchnames: slessp3-xen-201310
SUSE Linux Enterprise Server 11 SP4	xen >= 4.4.2_08-1.7 xen-doc-html >= 4.4.2_08-1.7 xen-kmp-default >= 4.4.2_08_3.0.101_63-1.7 xen-kmp-pae >= 4.4.2_08_3.0.101_63-1.7 xen-libs >= 4.4.2_08-1.7 xen-libs-32bit >= 4.4.2_08-1.7 xen-tools >= 4.4.2_08-1.7 xen-tools-domU >= 4.4.2_08-1.7	Patchnames: SUSE Linux Enterprise Server 11 SP4 GA xen
SUSE Linux Enterprise Server 12	xen >= 4.4.1_06-2.2 xen-doc-html >= 4.4.1_06-2.2 xen-kmp-default >= 4.4.1_06_k3.12.28_4-2.2 xen-libs >= 4.4.1_06-2.2 xen-libs-32bit >= 4.4.1_06-2.2 xen-tools >= 4.4.1_06-2.2 xen-tools-domU >= 4.4.1_06-2.2	Patchnames: SUSE Linux Enterprise Server 12 GA xen
SUSE Linux Enterprise Server 12 SP1	xen >= 4.5.1_12-2.3 xen-doc-html >= 4.5.1_12-2.3 xen-kmp-default >= 4.5.1_12_k3.12.49_11-2.3 xen-libs >= 4.5.1_12-2.3 xen-libs-32bit >= 4.5.1_12-2.3 xen-tools >= 4.5.1_12-2.3 xen-tools-domU >= 4.5.1_12-2.3	Patchnames: SUSE Linux Enterprise Server 12 SP1 GA xen
SUSE Linux Enterprise Server 12 SP2	xen >= 4.7.0_12-23.4 xen-doc-html >= 4.7.0_12-23.4 xen-libs >= 4.7.0_12-23.4 xen-libs-32bit >= 4.7.0_12-23.4 xen-tools >= 4.7.0_12-23.4 xen-tools-domU >= 4.7.0_12-23.4	Patchnames: SUSE Linux Enterprise Server 12 SP2 GA xen
SUSE Linux Enterprise Server 12 SP3	xen >= 4.9.0_08-2.2 xen-doc-html >= 4.9.0_08-2.2 xen-libs >= 4.9.0_08-2.2 xen-libs-32bit >= 4.9.0_08-2.2 xen-tools >= 4.9.0_08-2.2 xen-tools-domU >= 4.9.0_08-2.2	Patchnames: SUSE Linux Enterprise Server 12 SP3 GA xen
SUSE Linux Enterprise Server for VMWare 11 SP2	xen >= 4.1.6_02-0.5.1 xen-doc-html >= 4.1.6_02-0.5.1 xen-doc-pdf >= 4.1.6_02-0.5.1 xen-kmp-default >= 4.1.6_02_3.0.93_0.5-0.5.1 xen-kmp-pae >= 4.1.6_02_3.0.93_0.5-0.5.1 xen-kmp-trace >= 4.1.6_02_3.0.93_0.5-0.5.1 xen-libs >= 4.1.6_02-0.5.1 xen-libs-32bit >= 4.1.6_02-0.5.1 xen-tools >= 4.1.6_02-0.5.1 xen-tools-domU >= 4.1.6_02-0.5.1	Patchnames: slessp2-xen-201310
SUSE Linux Enterprise Software Development Kit 11 SP2	xen-devel >= 4.1.6_02-0.5.1	Patchnames: sdksp2-xen-201310
SUSE Linux Enterprise Software Development Kit 11 SP3	xen-devel >= 4.2.3_02-0.7.1	Patchnames: sdksp3-xen-201310
SUSE Linux Enterprise Software Development Kit 11 SP4	xen-devel >= 4.4.2_08-1.7	Patchnames: SUSE Linux Enterprise Software Development Kit 11 SP4 GA xen-devel
SUSE Linux Enterprise Software Development Kit 12	xen-devel >= 4.4.1_06-2.2	Patchnames: SUSE Linux Enterprise Software Development Kit 12 GA xen-devel
SUSE Linux Enterprise Software Development Kit 12 SP1	xen-devel >= 4.5.1_12-2.3	Patchnames: SUSE Linux Enterprise Software Development Kit 12 SP1 GA xen-devel
SUSE Linux Enterprise Software Development Kit 12 SP2	xen-devel >= 4.7.0_12-23.4	Patchnames: SUSE Linux Enterprise Software Development Kit 12 SP2 GA xen-devel
SUSE Linux Enterprise Software Development Kit 12 SP3	xen-devel >= 4.9.0_08-2.2	Patchnames: SUSE Linux Enterprise Software Development Kit 12 SP3 GA xen-devel
SUSE Linux Enterprise Software Development Kit 11 SP2	xen-devel >= 4.1.6_02-0.5.1	Builds SAT Patch Nr: 8478
SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Server 11 SP2	xen-kmp-default >= 4.1.6_02_3.0.93_0.5-0.5.1 xen-kmp-pae >= 4.1.6_02_3.0.93_0.5-0.5.1 xen-kmp-trace >= 4.1.6_02_3.0.93_0.5-0.5.1 xen-libs >= 4.1.6_02-0.5.1 xen-tools-domU >= 4.1.6_02-0.5.1	Builds SAT Patch Nr: 8478
SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Server 11 SP2	xen >= 4.1.6_02-0.5.1 xen-doc-html >= 4.1.6_02-0.5.1 xen-doc-pdf >= 4.1.6_02-0.5.1 xen-kmp-default >= 4.1.6_02_3.0.93_0.5-0.5.1 xen-kmp-trace >= 4.1.6_02_3.0.93_0.5-0.5.1 xen-libs >= 4.1.6_02-0.5.1 xen-libs-32bit >= 4.1.6_02-0.5.1 xen-tools >= 4.1.6_02-0.5.1 xen-tools-domU >= 4.1.6_02-0.5.1	Builds SAT Patch Nr: 8478
SUSE Linux Enterprise Server 11 SP2 for VMware	xen-kmp-trace >= 4.1.6_02_3.0.93_0.5-0.5.1	Builds SAT Patch Nr: 8478
SUSE Linux Enterprise Software Development Kit 11 SP3	xen-devel >= 4.2.3_02-0.7.1	Builds SAT Patch Nr: 8479
SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Server 11 SP3	xen-kmp-default >= 4.2.3_02_3.0.93_0.8-0.7.1 xen-kmp-pae >= 4.2.3_02_3.0.93_0.8-0.7.1 xen-libs >= 4.2.3_02-0.7.1 xen-tools-domU >= 4.2.3_02-0.7.1	Builds SAT Patch Nr: 8479
SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Server 11 SP3	xen >= 4.2.3_02-0.7.1 xen-doc-html >= 4.2.3_02-0.7.1 xen-doc-pdf >= 4.2.3_02-0.7.1 xen-kmp-default >= 4.2.3_02_3.0.93_0.8-0.7.1 xen-libs >= 4.2.3_02-0.7.1 xen-libs-32bit >= 4.2.3_02-0.7.1 xen-tools >= 4.2.3_02-0.7.1 xen-tools-domU >= 4.2.3_02-0.7.1	Builds SAT Patch Nr: 8479
SUSE Linux Enterprise Server 10 SP4 LTSS for x86	xen >= 3.2.3_17040_46-0.7.1 xen-devel >= 3.2.3_17040_46-0.7.1 xen-doc-html >= 3.2.3_17040_46-0.7.1 xen-doc-pdf >= 3.2.3_17040_46-0.7.1 xen-doc-ps >= 3.2.3_17040_46-0.7.1 xen-kmp-bigsmp >= 3.2.3_17040_46_2.6.16.60_0.103.13-0.7.1 xen-kmp-debug >= 3.2.3_17040_46_2.6.16.60_0.103.13-0.7.1 xen-kmp-default >= 3.2.3_17040_46_2.6.16.60_0.103.13-0.7.1 xen-kmp-kdump >= 3.2.3_17040_46_2.6.16.60_0.103.13-0.7.1 xen-kmp-kdumppae >= 3.2.3_17040_46_2.6.16.60_0.103.13-0.7.1 xen-kmp-smp >= 3.2.3_17040_46_2.6.16.60_0.103.13-0.7.1 xen-kmp-vmi >= 3.2.3_17040_46_2.6.16.60_0.103.13-0.7.1 xen-kmp-vmipae >= 3.2.3_17040_46_2.6.16.60_0.103.13-0.7.1 xen-libs >= 3.2.3_17040_46-0.7.1 xen-tools >= 3.2.3_17040_46-0.7.1 xen-tools-domU >= 3.2.3_17040_46-0.7.1 xen-tools-ioemu >= 3.2.3_17040_46-0.7.1	Builds ZYPP Patch Nr: 8791
SUSE Linux Enterprise Server 10 SP4 LTSS for AMD64 and Intel EM64T	xen >= 3.2.3_17040_46-0.7.1 xen-devel >= 3.2.3_17040_46-0.7.1 xen-doc-html >= 3.2.3_17040_46-0.7.1 xen-doc-pdf >= 3.2.3_17040_46-0.7.1 xen-doc-ps >= 3.2.3_17040_46-0.7.1 xen-kmp-debug >= 3.2.3_17040_46_2.6.16.60_0.103.13-0.7.1 xen-kmp-default >= 3.2.3_17040_46_2.6.16.60_0.103.13-0.7.1 xen-kmp-kdump >= 3.2.3_17040_46_2.6.16.60_0.103.13-0.7.1 xen-kmp-smp >= 3.2.3_17040_46_2.6.16.60_0.103.13-0.7.1 xen-libs >= 3.2.3_17040_46-0.7.1 xen-libs-32bit >= 3.2.3_17040_46-0.7.1 xen-tools >= 3.2.3_17040_46-0.7.1 xen-tools-domU >= 3.2.3_17040_46-0.7.1 xen-tools-ioemu >= 3.2.3_17040_46-0.7.1	Builds ZYPP Patch Nr: 8791
SUSE Linux Enterprise Server 10 SP3 LTSS for x86	xen >= 3.2.3_17040_28-0.6.21.3 xen-devel >= 3.2.3_17040_28-0.6.21.3 xen-doc-html >= 3.2.3_17040_28-0.6.21.3 xen-doc-pdf >= 3.2.3_17040_28-0.6.21.3 xen-doc-ps >= 3.2.3_17040_28-0.6.21.3 xen-kmp-bigsmp >= 3.2.3_17040_28_2.6.16.60_0.113.9-0.6.21.3 xen-kmp-debug >= 3.2.3_17040_28_2.6.16.60_0.113.9-0.6.21.3 xen-kmp-default >= 3.2.3_17040_28_2.6.16.60_0.113.9-0.6.21.3 xen-kmp-kdump >= 3.2.3_17040_28_2.6.16.60_0.113.9-0.6.21.3 xen-kmp-kdumppae >= 3.2.3_17040_28_2.6.16.60_0.113.9-0.6.21.3 xen-kmp-smp >= 3.2.3_17040_28_2.6.16.60_0.113.9-0.6.21.3 xen-kmp-vmi >= 3.2.3_17040_28_2.6.16.60_0.113.9-0.6.21.3 xen-kmp-vmipae >= 3.2.3_17040_28_2.6.16.60_0.113.9-0.6.21.3 xen-libs >= 3.2.3_17040_28-0.6.21.3 xen-tools >= 3.2.3_17040_28-0.6.21.3 xen-tools-domU >= 3.2.3_17040_28-0.6.21.3 xen-tools-ioemu >= 3.2.3_17040_28-0.6.21.3	Builds ZYPP Patch Nr: 8808
SUSE Linux Enterprise Server 10 SP3 LTSS for AMD64 and Intel EM64T	xen >= 3.2.3_17040_28-0.6.21.3 xen-devel >= 3.2.3_17040_28-0.6.21.3 xen-doc-html >= 3.2.3_17040_28-0.6.21.3 xen-doc-pdf >= 3.2.3_17040_28-0.6.21.3 xen-doc-ps >= 3.2.3_17040_28-0.6.21.3 xen-kmp-debug >= 3.2.3_17040_28_2.6.16.60_0.113.9-0.6.21.3 xen-kmp-default >= 3.2.3_17040_28_2.6.16.60_0.113.9-0.6.21.3 xen-kmp-kdump >= 3.2.3_17040_28_2.6.16.60_0.113.9-0.6.21.3 xen-kmp-smp >= 3.2.3_17040_28_2.6.16.60_0.113.9-0.6.21.3 xen-libs >= 3.2.3_17040_28-0.6.21.3 xen-libs-32bit >= 3.2.3_17040_28-0.6.21.3 xen-tools >= 3.2.3_17040_28-0.6.21.3 xen-tools-domU >= 3.2.3_17040_28-0.6.21.3 xen-tools-ioemu >= 3.2.3_17040_28-0.6.21.3	Builds ZYPP Patch Nr: 8808
SUSE Linux Enterprise Server 11 SP1 LTSS	xen >= 4.0.3_21548_16-0.5.1 xen-doc-html >= 4.0.3_21548_16-0.5.1 xen-doc-pdf >= 4.0.3_21548_16-0.5.1 xen-kmp-default >= 4.0.3_21548_16_2.6.32.59_0.9-0.5.1 xen-kmp-pae >= 4.0.3_21548_16_2.6.32.59_0.9-0.5.1 xen-kmp-trace >= 4.0.3_21548_16_2.6.32.59_0.9-0.5.1 xen-libs >= 4.0.3_21548_16-0.5.1 xen-tools >= 4.0.3_21548_16-0.5.1 xen-tools-domU >= 4.0.3_21548_16-0.5.1	Builds SAT Patch Nr: 8963
SUSE Linux Enterprise Server 11 SP1 LTSS	xen >= 4.0.3_21548_16-0.5.1 xen-doc-html >= 4.0.3_21548_16-0.5.1 xen-doc-pdf >= 4.0.3_21548_16-0.5.1 xen-kmp-default >= 4.0.3_21548_16_2.6.32.59_0.9-0.5.1 xen-kmp-trace >= 4.0.3_21548_16_2.6.32.59_0.9-0.5.1 xen-libs >= 4.0.3_21548_16-0.5.1 xen-tools >= 4.0.3_21548_16-0.5.1 xen-tools-domU >= 4.0.3_21548_16-0.5.1	Builds SAT Patch Nr: 8963
openSUSE Leap 42.1	xen >= 4.5.1_10-1.4 xen-doc-html >= 4.5.1_10-1.4 xen-kmp-default >= 4.5.1_10_k4.1.12_1-1.4 xen-libs >= 4.5.1_10-1.4 xen-tools >= 4.5.1_10-1.4 xen-tools-domU >= 4.5.1_10-1.4	Patchnames: openSUSE Leap 42.1 GA xen
openSUSE Leap 42.2	xen >= 4.7.0_12-1.6 xen-doc-html >= 4.7.0_12-1.6 xen-libs >= 4.7.0_12-1.6 xen-tools >= 4.7.0_12-1.6 xen-tools-domU >= 4.7.0_12-1.6	Patchnames: openSUSE Leap 42.2 GA xen
openSUSE Leap 42.3	xen >= 4.9.0_08-2.1 xen-doc-html >= 4.9.0_08-2.1 xen-libs >= 4.9.0_08-2.1 xen-tools >= 4.9.0_08-2.1 xen-tools-domU >= 4.9.0_08-2.1	Patchnames: openSUSE Leap 42.3 GA xen
openSUSE Tumbleweed	xen >= 4.7.0_12-1.3 xen-devel >= 4.7.0_12-1.3 xen-doc-html >= 4.7.0_12-1.3 xen-libs >= 4.7.0_12-1.3 xen-libs-32bit >= 4.7.0_12-1.3 xen-tools >= 4.7.0_12-1.3 xen-tools-domU >= 4.7.0_12-1.3	Patchnames: openSUSE Tumbleweed GA xen

---

Status of this issue by product and package

Product(s)	Source package	State
SUSE Linux Enterprise Desktop 10 SP3	xen	Released
SUSE Linux Enterprise Desktop 10 SP4	xen	Released
SUSE Linux Enterprise Desktop 11 SP1	xen	Released
SUSE Linux Enterprise Desktop 11 SP2	xen	Released
SUSE Linux Enterprise Desktop 11 SP3	xen	Released
SUSE Linux Enterprise SDK 11 SP1	xen	Released
SUSE Linux Enterprise SDK 11 SP2	xen	Released
SUSE Linux Enterprise SDK 11 SP3	xen	Released
SUSE Linux Enterprise Server 10 SP3	xen	Released
SUSE Linux Enterprise Server 10 SP4	xen	Released
SUSE Linux Enterprise Server 10 SP4 LTSS	xen	Released
SUSE Linux Enterprise Server 11 SP1	xen	Released
SUSE Linux Enterprise Server 11 SP1 LTSS	xen	Released
SUSE Linux Enterprise Server 11 SP2	xen	Released
SUSE Linux Enterprise Server 11 SP2 LTSS	xen	Released
SUSE Linux Enterprise Server 11 SP3	xen	Released
SUSE Linux Enterprise Server for SAP AIO 11 SP1	xen	Released