CVE-2014-1896

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2014-1896 at MITRE

Description

The (1) do_send and (2) do_recv functions in io.c in libvchan in Xen 4.2.x, 4.3.x, and 4.4-RC series allows local guests to cause a denial of service or possibly gain privileges via crafted xenstore ring indexes, which triggers a "read or write past the end of the ring."

NVD CVSS v2 Base Score: 4.9 (AV:A/AC:M/Au:S/C:P/I:P/A:P)

SUSE information

SUSE Bugzilla entry: 860300

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Linux Enterprise Desktop 11 SP3
  • xen >= 4.2.4_02-0.7.1
  • xen-doc-html >= 4.2.4_02-0.7.1
  • xen-doc-pdf >= 4.2.4_02-0.7.1
  • xen-kmp-default >= 4.2.4_02_3.0.101_0.15-0.7.1
  • xen-kmp-pae >= 4.2.4_02_3.0.101_0.15-0.7.1
  • xen-libs >= 4.2.4_02-0.7.1
  • xen-libs-32bit >= 4.2.4_02-0.7.1
  • xen-tools >= 4.2.4_02-0.7.1
  • xen-tools-domU >= 4.2.4_02-0.7.1
Patchnames:
sledsp3-xen-201402
SUSE Linux Enterprise Server 11 SP3
  • xen >= 4.2.4_02-0.7.1
  • xen-doc-html >= 4.2.4_02-0.7.1
  • xen-doc-pdf >= 4.2.4_02-0.7.1
  • xen-kmp-default >= 4.2.4_02_3.0.101_0.15-0.7.1
  • xen-kmp-pae >= 4.2.4_02_3.0.101_0.15-0.7.1
  • xen-libs >= 4.2.4_02-0.7.1
  • xen-libs-32bit >= 4.2.4_02-0.7.1
  • xen-tools >= 4.2.4_02-0.7.1
  • xen-tools-domU >= 4.2.4_02-0.7.1
Patchnames:
slessp3-xen-201402
SUSE Linux Enterprise Software Development Kit 11 SP3
  • xen-devel >= 4.2.4_02-0.7.1
Patchnames:
sdksp3-xen-201402
SUSE Linux Enterprise Software Development Kit 11 SP3
  • xen-devel >= 4.2.4_02-0.7.1
Builds
SAT Patch Nr: 8973
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Server 11 SP3
  • xen-kmp-default >= 4.2.4_02_3.0.101_0.15-0.7.1
  • xen-kmp-pae >= 4.2.4_02_3.0.101_0.15-0.7.1
  • xen-libs >= 4.2.4_02-0.7.1
  • xen-tools-domU >= 4.2.4_02-0.7.1
Builds
SAT Patch Nr: 8973
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Server 11 SP3
  • xen >= 4.2.4_02-0.7.1
  • xen-doc-html >= 4.2.4_02-0.7.1
  • xen-doc-pdf >= 4.2.4_02-0.7.1
  • xen-kmp-default >= 4.2.4_02_3.0.101_0.15-0.7.1
  • xen-libs >= 4.2.4_02-0.7.1
  • xen-libs-32bit >= 4.2.4_02-0.7.1
  • xen-tools >= 4.2.4_02-0.7.1
  • xen-tools-domU >= 4.2.4_02-0.7.1
Builds
SAT Patch Nr: 8973
openSUSE 12.3
  • xen >= 4.2.4_02-1.26.2
  • xen-debugsource >= 4.2.4_02-1.26.2
  • xen-devel >= 4.2.4_02-1.26.2
  • xen-doc-html >= 4.2.4_02-1.26.2
  • xen-doc-pdf >= 4.2.4_02-1.26.2
  • xen-kmp-default >= 4.2.4_02_k3.7.10_1.28-1.26.2
  • xen-kmp-default-debuginfo >= 4.2.4_02_k3.7.10_1.28-1.26.2
  • xen-kmp-desktop >= 4.2.4_02_k3.7.10_1.28-1.26.2
  • xen-kmp-desktop-debuginfo >= 4.2.4_02_k3.7.10_1.28-1.26.2
  • xen-kmp-pae >= 4.2.4_02_k3.7.10_1.28-1.26.2
  • xen-kmp-pae-debuginfo >= 4.2.4_02_k3.7.10_1.28-1.26.2
  • xen-libs >= 4.2.4_02-1.26.2
  • xen-libs-32bit >= 4.2.4_02-1.26.2
  • xen-libs-debuginfo >= 4.2.4_02-1.26.2
  • xen-libs-debuginfo-32bit >= 4.2.4_02-1.26.2
  • xen-tools >= 4.2.4_02-1.26.2
  • xen-tools-debuginfo >= 4.2.4_02-1.26.2
  • xen-tools-domU >= 4.2.4_02-1.26.2
  • xen-tools-domU-debuginfo >= 4.2.4_02-1.26.2
Patchnames:
openSUSE-2014-271