SUSE SLES11 Security Update : xen (SUSE-SU-2020:14444-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2020:14444-1 advisory. - Improper invalidation for page table updates by a virtual guest operating system for multiple IntelR Processors may allow an authenticated...

CVE-2019-19580

Xen through 4.12.x contains a privilege-escalation vulnerability (CVE-2019-19580) affecting x86 PV guests due to race conditions in pagetable promotion/demotion after an incomplete fix for CVE-2019-18421 (XSA-299). The issue could allow a malicious PV guest administrator to escalate to host privi...

CVE-2019-19580

An issue was discovered in Xen through 4.12.x allowing x86 PV guest OS users to gain host OS privileges by leveraging race conditions in pagetable promotion and demotion operations, because of an incomplete fix for CVE-2019-18421. XSA-299 addressed several critical issues in restartable PV type...