Lucene search
GoogleOSV:SUSE-SU-2024:2535-1HistoryJul 16, 2024 - 12:12 p.m.
Security update for xen
2024-07-1612:12:51
Google
osv.dev
xen
security update
cve-2023-28746
cve-2023-46842
cve-2024-2193
cve-2024-2201
cve-2024-31142
cve-2024-31143
vulnerabilities.
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.5
Confidence
Low
This update for xen fixes the following issues:
- CVE-2023-28746: Register File Data Sampling (XSA-452, bsc#1221332)
- CVE-2023-46842: HVM hypercalls may trigger Xen bug check (XSA-454, bsc#1221984)
- CVE-2024-2193: Fixed GhostRace, a speculative race conditions. (XSA-453, bsc#1221334)
- CVE-2024-2201: Mitigation for Native Branch History Injection (XSA-456, bsc#1222453)
- CVE-2024-31142: Fixed incorrect logic for BTC/SRSO mitigations (XSA-455, bsc#1222302)
- CVE-2024-31143: Fixed double unlock in x86 guest IRQ handling (XSA-458, bsc#1227355)
References
bugzilla.suse.com/1214083
bugzilla.suse.com/1221332
bugzilla.suse.com/1221334
bugzilla.suse.com/1221984
bugzilla.suse.com/1222302
bugzilla.suse.com/1222453
bugzilla.suse.com/1227355
www.suse.com/security/cve/CVE-2023-28746
www.suse.com/security/cve/CVE-2023-46842
www.suse.com/security/cve/CVE-2024-2193
www.suse.com/security/cve/CVE-2024-2201
www.suse.com/security/cve/CVE-2024-31142
www.suse.com/security/cve/CVE-2024-31143
www.suse.com/support/update/announcement/2024/suse-su-20242535-1/
Related
nessus
nessus
SUSE SLES15 Security Update : xen (SUSE-SU-2024:2535-1)
2024-07-17 00:00:00
Fedora 38 : xen (2024-a676697123)
2024-04-25 00:00:00
SUSE SLES12 Security Update : xen (SUSE-SU-2024:1541-1)
2024-05-08 00:00:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2024:2535-1)
2024-07-17 00:00:00
openSUSE: Security Advisory for xen (SUSE-SU-2024:1259-1)
2024-04-17 00:00:00
SUSE: Security Advisory (SUSE-SU-2024:1541-1)
2024-05-07 00:00:00
citrix
citrix
fedora
fedora
[SECURITY] Fedora 38 Update: xen-4.17.4-1.fc38
2024-04-26 01:04:11
[SECURITY] Fedora 40 Update: xen-4.18.2-1.fc40
2024-04-25 01:00:44
[SECURITY] Fedora 39 Update: xen-4.17.4-1.fc39
2024-04-25 01:20:27
osv
osv
Security update for xen
2024-07-16 12:12:13
Security update for xen
2024-07-30 13:33:35
Security update for xen
2024-07-16 12:12:43
thn
thn
Researchers Uncover First Native Spectre v2 Exploit Against Linux Kernel
2024-04-10 09:26:00
GhostRace – New Data Leak Vulnerability Affects Modern CPUs
2024-03-15 17:46:00
mageia
mageia
Updated xen packages fix security vulnerabilities
2024-04-10 07:03:52
Updated microcode packages fix security vulnerabilities
2024-03-31 06:27:58
cvelist
cvelist
CVE-2023-46842 x86 HVM hypercalls may trigger Xen bug check
2024-05-16 13:39:26
CVE-2024-31142 x86: Incorrect logic for BTC/SRSO mitigations
2024-05-16 13:39:42
CVE-2024-31143 double unlock in x86 guest IRQ handling
2024-07-18 13:31:31
xen
xen
double unlock in x86 guest IRQ handling
2024-07-16 11:59:00
x86: Incorrect logic for BTC/SRSO mitigations
2024-04-09 16:29:00
x86 HVM hypercalls may trigger Xen bug check
2024-04-09 11:50:00
cve
cve
ubuntucve
ubuntucve
debiancve
debiancve
nvd
nvd
vulnrichment
vulnrichment
CVE-2024-31143 double unlock in x86 guest IRQ handling
2024-07-18 13:31:31
CVE-2024-31142 x86: Incorrect logic for BTC/SRSO mitigations
2024-05-16 13:39:42
CVE-2023-46842 x86 HVM hypercalls may trigger Xen bug check
2024-05-16 13:39:26
redos
redos
ROS-20240916-09
2024-09-16 00:00:00
veracode
veracode
Speculative Race Condition
2024-03-20 23:42:26
Information Exposure
2024-03-16 08:18:03
f5
f5
K000139682: Speculative race conditions vulnerability CVE-2024-2193
2024-05-20 00:00:00
K000140297: Speculative race condition vulnerability CVE-2024-26602
2024-07-25 00:00:00
alpinelinux
alpinelinux
CVE-2023-28746
2024-03-14 17:15:50
mscve
mscve
Intel: CVE-2023-28746 Register File Data Sampling (RFDS)
2024-03-12 07:00:00
intel
intel
2024.1 IPU - Intel® Atom® Processor Advisory
2024-03-12 00:00:00
redhatcve
redhatcve
talosblog
talosblog
Not everything has to be a massive, global cyber attack
2024-03-14 18:00:08
cert
cert
amd
amd
Speculative Race Conditions (SRCs)
2024-03-12 00:00:00
Spectre V2 Mitigation Bypass on Linux®
2024-04-09 00:00:00
oraclelinux
oraclelinux
Unbreakable Enterprise kernel-container security update
2024-05-13 00:00:00
Unbreakable Enterprise kernel security update
2024-05-13 00:00:00
Unbreakable Enterprise kernel security update
2024-05-15 00:00:00
amazon
amazon
Medium: kernel
2024-04-24 22:15:00
hp
hp
Intel 2024.1 IPU - BIOS March 2024 Security Updates
2024-03-13 00:00:00
ubuntu
ubuntu
Linux kernel (AWS) vulnerabilities
2024-07-10 00:00:00
Linux kernel vulnerabilities
2024-07-03 00:00:00
Intel Microcode vulnerabilities
2024-05-29 00:00:00
freebsd
freebsd
Intel CPUs -- multiple vulnerabilities
2023-03-12 00:00:00
photon
photon
Important Photon OS Security Update - PHSA-2024-5.0-0245
2024-04-12 00:00:00
Moderate Photon OS Security Update - PHSA-2024-4.0-0607
2024-05-10 00:00:00
debian
debian
[SECURITY] [DLA 3808-1] intel-microcode security update
2024-05-04 15:21:16
chrome
chrome
Stable Channel Update for ChromeOS / ChromeOS Flex
2024-03-05 00:00:00
cloudfoundry
cloudfoundry
USN-6797-1: Intel Microcode vulnerabilities | Cloud Foundry
2024-07-25 00:00:00
mskb
mskb
March 12, 2024—KB5035888 (Monthly Rollup)
2024-03-12 07:00:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
AI Score
7.5
Confidence
Low
Related for OSV:SUSE-SU-2024:2535-1