CVE-2017-2620

Upstream information

CVE-2017-2620 at MITRE

Description

** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.

SUSE information

CVSS v2 Scores
	SUSE
Base Score	4.86
Vector	AV:A/AC:M/Au:S/C:P/I:P/A:P
Access Vector	Adjacent Network
Access Complexity	Medium
Authentication	Single
Confidentiality Impact	Partial
Integrity Impact	Partial
Availability Impact	Partial

This issue is currently rated as having moderate severity.

SUSE Bugzilla entries: 1024834 [NEW], 1024972 [RESOLVED / FIXED]

SUSE Security Advisories:

SUSE-SU-2017:0570-1, published Mon, 27 Feb 2017 18:10:46 +0100 (CET)
SUSE-SU-2017:0571-1, published Mon, 27 Feb 2017 18:13:48 +0100 (CET)
SUSE-SU-2017:0582-1, published Wed, 1 Mar 2017 00:33:56 +0100 (CET)
SUSE-SU-2017:0625-1, published Tue, 7 Mar 2017 18:10:16 +0100 (CET)
SUSE-SU-2017:0647-1, published Fri, 10 Mar 2017 00:07:36 +0100 (CET)
SUSE-SU-2017:0661-1, published Fri, 10 Mar 2017 21:09:01 +0100 (CET)
SUSE-SU-2017:0718-1, published Fri, 17 Mar 2017 12:10:10 +0100 (CET)
SUSE-SU-2017:1135-1, published Fri, 28 Apr 2017 21:11:21 +0200 (CEST)
SUSE-SU-2017:1241-1, published Thu, 11 May 2017 15:09:39 +0200 (CEST)
openSUSE-SU-2017:0665-1, published Sat, 11 Mar 2017 15:07:34 +0100 (CET)
openSUSE-SU-2017:0707-1, published Thu, 16 Mar 2017 18:08:06 +0100 (CET)
openSUSE-SU-2017:1312-1, published Tue, 16 May 2017 21:10:13 +0200 (CEST)

List of released packages

Product(s)	Fixed package version(s)	References
SUSE Linux Enterprise Desktop 12 SP1	`qemu >= 2.3.1-32.11` `qemu-block-curl >= 2.3.1-32.11` `qemu-ipxe >= 1.0.0-32.11` `qemu-kvm >= 2.3.1-32.11` `qemu-seabios >= 1.8.1-32.11` `qemu-sgabios >= 8-32.11` `qemu-tools >= 2.3.1-32.11` `qemu-vgabios >= 1.8.1-32.11` `qemu-x86 >= 2.3.1-32.11` `xen >= 4.5.5_06-22.11.2` `xen-kmp-default >= 4.5.5_06_k3.12.69_60.64.32-22.11.2` `xen-libs >= 4.5.5_06-22.11.2` `xen-libs-32bit >= 4.5.5_06-22.11.2`	Patchnames: SUSE-SLE-DESKTOP-12-SP1-2017-297 SUSE-SLE-DESKTOP-12-SP1-2017-740
SUSE Linux Enterprise Desktop 12 SP2	`qemu >= 2.6.2-41.9.1` `qemu-block-curl >= 2.6.2-41.9.1` `qemu-ipxe >= 1.0.0-41.9.1` `qemu-kvm >= 2.6.2-41.9.1` `qemu-seabios >= 1.9.1-41.9.1` `qemu-sgabios >= 8-41.9.1` `qemu-tools >= 2.6.2-41.9.1` `qemu-vgabios >= 1.9.1-41.9.1` `qemu-x86 >= 2.6.2-41.9.1` `xen >= 4.7.1_06-31.1` `xen-libs >= 4.7.1_06-31.1` `xen-libs-32bit >= 4.7.1_06-31.1`	Patchnames: SUSE-SLE-DESKTOP-12-SP2-2017-296 SUSE-SLE-DESKTOP-12-SP2-2017-336
SUSE Linux Enterprise Point of Sale 11 SP3	`xen >= 4.2.5_21-35.1` `xen-kmp-default >= 4.2.5_21_3.0.101_0.47.96-35.1` `xen-kmp-pae >= 4.2.5_21_3.0.101_0.47.96-35.1` `xen-libs >= 4.2.5_21-35.1` `xen-tools-domU >= 4.2.5_21-35.1`	Patchnames: sleposp3-xen-13030
SUSE Linux Enterprise Server 11 SP3-LTSS	`xen >= 4.2.5_21-35.1` `xen-doc-html >= 4.2.5_21-35.1` `xen-doc-pdf >= 4.2.5_21-35.1` `xen-kmp-default >= 4.2.5_21_3.0.101_0.47.96-35.1` `xen-kmp-pae >= 4.2.5_21_3.0.101_0.47.96-35.1` `xen-libs >= 4.2.5_21-35.1` `xen-libs-32bit >= 4.2.5_21-35.1` `xen-tools >= 4.2.5_21-35.1` `xen-tools-domU >= 4.2.5_21-35.1`	Patchnames: slessp3-xen-13030
SUSE Linux Enterprise Server 11 SP4	`kvm >= 1.4.2-59.1` `xen >= 4.4.4_14-51.1` `xen-doc-html >= 4.4.4_14-51.1` `xen-kmp-default >= 4.4.4_14_3.0.101_94-51.1` `xen-kmp-pae >= 4.4.4_14_3.0.101_94-51.1` `xen-libs >= 4.4.4_14-51.1` `xen-libs-32bit >= 4.4.4_14-51.1` `xen-tools >= 4.4.4_14-51.1` `xen-tools-domU >= 4.4.4_14-51.1`	Patchnames: slessp4-kvm-13080 slessp4-xen-13019
SUSE Linux Enterprise Server 12 SP1	`qemu >= 2.3.1-32.11` `qemu-block-curl >= 2.3.1-32.11` `qemu-block-rbd >= 2.3.1-32.11` `qemu-guest-agent >= 2.3.1-32.11` `qemu-ipxe >= 1.0.0-32.11` `qemu-kvm >= 2.3.1-32.11` `qemu-lang >= 2.3.1-32.11` `qemu-ppc >= 2.3.1-32.11` `qemu-s390 >= 2.3.1-32.11` `qemu-seabios >= 1.8.1-32.11` `qemu-sgabios >= 8-32.11` `qemu-tools >= 2.3.1-32.11` `qemu-vgabios >= 1.8.1-32.11` `qemu-x86 >= 2.3.1-32.11` `xen >= 4.5.5_06-22.11.2` `xen-doc-html >= 4.5.5_06-22.11.2` `xen-kmp-default >= 4.5.5_06_k3.12.69_60.64.32-22.11.2` `xen-libs >= 4.5.5_06-22.11.2` `xen-libs-32bit >= 4.5.5_06-22.11.2` `xen-tools >= 4.5.5_06-22.11.2` `xen-tools-domU >= 4.5.5_06-22.11.2`	Patchnames: SUSE-SLE-SERVER-12-SP1-2017-297 SUSE-SLE-SERVER-12-SP1-2017-740
SUSE Linux Enterprise Server 12 SP2	`qemu >= 2.6.2-41.9.1` `qemu-arm >= 2.6.2-41.9.1` `qemu-block-curl >= 2.6.2-41.9.1` `qemu-block-rbd >= 2.6.2-41.9.1` `qemu-block-ssh >= 2.6.2-41.9.1` `qemu-guest-agent >= 2.6.2-41.9.1` `qemu-ipxe >= 1.0.0-41.9.1` `qemu-kvm >= 2.6.2-41.9.1` `qemu-lang >= 2.6.2-41.9.1` `qemu-ppc >= 2.6.2-41.9.1` `qemu-s390 >= 2.6.2-41.9.1` `qemu-seabios >= 1.9.1-41.9.1` `qemu-sgabios >= 8-41.9.1` `qemu-tools >= 2.6.2-41.9.1` `qemu-vgabios >= 1.9.1-41.9.1` `qemu-x86 >= 2.6.2-41.9.1` `xen >= 4.7.1_06-31.1` `xen-doc-html >= 4.7.1_06-31.1` `xen-libs >= 4.7.1_06-31.1` `xen-libs-32bit >= 4.7.1_06-31.1` `xen-tools >= 4.7.1_06-31.1` `xen-tools-domU >= 4.7.1_06-31.1`	Patchnames: SUSE-SLE-SERVER-12-SP2-2017-296 SUSE-SLE-SERVER-12-SP2-2017-336
SUSE Linux Enterprise Server 12-LTSS	`qemu >= 2.0.2-48.31.1` `qemu-block-curl >= 2.0.2-48.31.1` `qemu-block-rbd >= 2.0.2-48.31.1` `qemu-guest-agent >= 2.0.2-48.31.1` `qemu-ipxe >= 1.0.0-48.31.1` `qemu-kvm >= 2.0.2-48.31.1` `qemu-lang >= 2.0.2-48.31.1` `qemu-ppc >= 2.0.2-48.31.1` `qemu-s390 >= 2.0.2-48.31.1` `qemu-seabios >= 1.7.4-48.31.1` `qemu-sgabios >= 8-48.31.1` `qemu-tools >= 2.0.2-48.31.1` `qemu-vgabios >= 1.7.4-48.31.1` `qemu-x86 >= 2.0.2-48.31.1` `xen >= 4.4.4_14-22.33.1` `xen-doc-html >= 4.4.4_14-22.33.1` `xen-kmp-default >= 4.4.4_14_k3.12.61_52.66-22.33.1` `xen-libs >= 4.4.4_14-22.33.1` `xen-libs-32bit >= 4.4.4_14-22.33.1` `xen-tools >= 4.4.4_14-22.33.1` `xen-tools-domU >= 4.4.4_14-22.33.1`	Patchnames: SUSE-SLE-SERVER-12-2017-299 SUSE-SLE-SERVER-12-2017-366
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2	`qemu >= 2.6.2-41.9.1` `qemu-arm >= 2.6.2-41.9.1` `qemu-block-curl >= 2.6.2-41.9.1` `qemu-block-rbd >= 2.6.2-41.9.1` `qemu-block-ssh >= 2.6.2-41.9.1` `qemu-guest-agent >= 2.6.2-41.9.1` `qemu-ipxe >= 1.0.0-41.9.1` `qemu-lang >= 2.6.2-41.9.1` `qemu-tools >= 2.6.2-41.9.1`	Patchnames: SUSE-SLE-RPI-12-SP2-2017-336
SUSE Linux Enterprise Software Development Kit 11 SP4	`xen >= 4.4.4_14-51.1` `xen-devel >= 4.4.4_14-51.1`	Patchnames: sdksp4-xen-13019
SUSE Linux Enterprise Software Development Kit 12 SP1	`xen >= 4.5.5_06-22.11.2` `xen-devel >= 4.5.5_06-22.11.2`	Patchnames: SUSE-SLE-SDK-12-SP1-2017-297
SUSE Linux Enterprise Software Development Kit 12 SP2	`xen >= 4.7.1_06-31.1` `xen-devel >= 4.7.1_06-31.1`	Patchnames: SUSE-SLE-SDK-12-SP2-2017-296
SUSE Linux Enterprise for SAP 12	`qemu >= 2.0.2-48.31.1` `qemu-block-curl >= 2.0.2-48.31.1` `qemu-block-rbd >= 2.0.2-48.31.1` `qemu-guest-agent >= 2.0.2-48.31.1` `qemu-ipxe >= 1.0.0-48.31.1` `qemu-kvm >= 2.0.2-48.31.1` `qemu-lang >= 2.0.2-48.31.1` `qemu-seabios >= 1.7.4-48.31.1` `qemu-sgabios >= 8-48.31.1` `qemu-tools >= 2.0.2-48.31.1` `qemu-vgabios >= 1.7.4-48.31.1` `qemu-x86 >= 2.0.2-48.31.1` `xen >= 4.4.4_14-22.33.1` `xen-doc-html >= 4.4.4_14-22.33.1` `xen-kmp-default >= 4.4.4_14_k3.12.61_52.66-22.33.1` `xen-libs >= 4.4.4_14-22.33.1` `xen-libs-32bit >= 4.4.4_14-22.33.1` `xen-tools >= 4.4.4_14-22.33.1` `xen-tools-domU >= 4.4.4_14-22.33.1`	Patchnames: SUSE-SLE-SAP-12-2017-299 SUSE-SLE-SAP-12-2017-366
SUSE Manager 2.1	`xen >= 4.2.5_21-35.1` `xen-doc-html >= 4.2.5_21-35.1` `xen-doc-pdf >= 4.2.5_21-35.1` `xen-kmp-default >= 4.2.5_21_3.0.101_0.47.96-35.1` `xen-libs >= 4.2.5_21-35.1` `xen-libs-32bit >= 4.2.5_21-35.1` `xen-tools >= 4.2.5_21-35.1` `xen-tools-domU >= 4.2.5_21-35.1`	Patchnames: sleman21-xen-13030
SUSE Manager Proxy 2.1	`xen >= 4.2.5_21-35.1` `xen-doc-html >= 4.2.5_21-35.1` `xen-doc-pdf >= 4.2.5_21-35.1` `xen-kmp-default >= 4.2.5_21_3.0.101_0.47.96-35.1` `xen-libs >= 4.2.5_21-35.1` `xen-libs-32bit >= 4.2.5_21-35.1` `xen-tools >= 4.2.5_21-35.1` `xen-tools-domU >= 4.2.5_21-35.1`	Patchnames: slemap21-xen-13030
SUSE OpenStack Cloud 5	`xen >= 4.2.5_21-35.1` `xen-doc-html >= 4.2.5_21-35.1` `xen-doc-pdf >= 4.2.5_21-35.1` `xen-kmp-default >= 4.2.5_21_3.0.101_0.47.96-35.1` `xen-libs >= 4.2.5_21-35.1` `xen-libs-32bit >= 4.2.5_21-35.1` `xen-tools >= 4.2.5_21-35.1` `xen-tools-domU >= 4.2.5_21-35.1`	Patchnames: sleclo50sp3-xen-13030
openSUSE Leap 42.1	`qemu >= 2.3.1-25.1` `qemu-arm >= 2.3.1-25.1` `qemu-arm-debuginfo >= 2.3.1-25.1` `qemu-block-curl >= 2.3.1-25.1` `qemu-block-curl-debuginfo >= 2.3.1-25.1` `qemu-block-rbd >= 2.3.1-25.1` `qemu-block-rbd-debuginfo >= 2.3.1-25.1` `qemu-debugsource >= 2.3.1-25.1` `qemu-extra >= 2.3.1-25.1` `qemu-extra-debuginfo >= 2.3.1-25.1` `qemu-guest-agent >= 2.3.1-25.1` `qemu-guest-agent-debuginfo >= 2.3.1-25.1` `qemu-ipxe >= 1.0.0-25.1` `qemu-kvm >= 2.3.1-25.1` `qemu-lang >= 2.3.1-25.1` `qemu-linux-user >= 2.3.1-25.1` `qemu-linux-user-debuginfo >= 2.3.1-25.1` `qemu-linux-user-debugsource >= 2.3.1-25.1` `qemu-ppc >= 2.3.1-25.1` `qemu-ppc-debuginfo >= 2.3.1-25.1` `qemu-s390 >= 2.3.1-25.1` `qemu-s390-debuginfo >= 2.3.1-25.1` `qemu-seabios >= 1.8.1-25.1` `qemu-sgabios >= 8-25.1` `qemu-testsuite >= 2.3.1-25.1` `qemu-tools >= 2.3.1-25.1` `qemu-tools-debuginfo >= 2.3.1-25.1` `qemu-vgabios >= 1.8.1-25.1` `qemu-x86 >= 2.3.1-25.1` `qemu-x86-debuginfo >= 2.3.1-25.1`	Patchnames: openSUSE-2017-589
openSUSE Leap 42.2	`qemu >= 2.6.2-29.4` `qemu-arm >= 2.6.2-29.4` `qemu-arm-debuginfo >= 2.6.2-29.4` `qemu-block-curl >= 2.6.2-29.4` `qemu-block-curl-debuginfo >= 2.6.2-29.4` `qemu-block-dmg >= 2.6.2-29.4` `qemu-block-dmg-debuginfo >= 2.6.2-29.4` `qemu-block-iscsi >= 2.6.2-29.4` `qemu-block-iscsi-debuginfo >= 2.6.2-29.4` `qemu-block-rbd >= 2.6.2-29.4` `qemu-block-rbd-debuginfo >= 2.6.2-29.4` `qemu-block-ssh >= 2.6.2-29.4` `qemu-block-ssh-debuginfo >= 2.6.2-29.4` `qemu-debugsource >= 2.6.2-29.4` `qemu-extra >= 2.6.2-29.4` `qemu-extra-debuginfo >= 2.6.2-29.4` `qemu-guest-agent >= 2.6.2-29.4` `qemu-guest-agent-debuginfo >= 2.6.2-29.4` `qemu-ipxe >= 1.0.0-29.4` `qemu-kvm >= 2.6.2-29.4` `qemu-lang >= 2.6.2-29.4` `qemu-linux-user >= 2.6.2-29.1` `qemu-linux-user-debuginfo >= 2.6.2-29.1` `qemu-linux-user-debugsource >= 2.6.2-29.1` `qemu-ppc >= 2.6.2-29.4` `qemu-ppc-debuginfo >= 2.6.2-29.4` `qemu-s390 >= 2.6.2-29.4` `qemu-s390-debuginfo >= 2.6.2-29.4` `qemu-seabios >= 1.9.1-29.4` `qemu-sgabios >= 8-29.4` `qemu-testsuite >= 2.6.2-29.8` `qemu-tools >= 2.6.2-29.4` `qemu-tools-debuginfo >= 2.6.2-29.4` `qemu-vgabios >= 1.9.1-29.4` `qemu-x86 >= 2.6.2-29.4` `qemu-x86-debuginfo >= 2.6.2-29.4` `xen >= 4.7.1_06-9.2` `xen-debugsource >= 4.7.1_06-9.2` `xen-devel >= 4.7.1_06-9.2` `xen-doc-html >= 4.7.1_06-9.2` `xen-libs >= 4.7.1_06-9.2` `xen-libs-32bit >= 4.7.1_06-9.2` `xen-libs-debuginfo >= 4.7.1_06-9.2` `xen-libs-debuginfo-32bit >= 4.7.1_06-9.2` `xen-tools >= 4.7.1_06-9.2` `xen-tools-debuginfo >= 4.7.1_06-9.2` `xen-tools-domU >= 4.7.1_06-9.2` `xen-tools-domU-debuginfo >= 4.7.1_06-9.2`	Patchnames: openSUSE-2017-329 openSUSE-2017-349