Lucene search

K
suseSuseSUSE-SU-2015:0940-1
HistoryMay 26, 2015 - 2:04 p.m.

Security update for Xen (important)

2015-05-2614:04:56
lists.opensuse.org
12

0.001 Low

EPSS

Percentile

50.5%

Xen was updated to fix two security issues:

   * CVE-2015-3456: A buffer overflow in the floppy drive emulation,
     which could be used to carry out denial of service attacks or
     potential code execution against the host. This vulnerability is
     also known as VENOM.
   * CVE-2015-3340: An information leak through XEN_DOMCTL_gettscinfo().
     (XSA-132)

Security Issues:

   * CVE-2015-3456
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3456">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3456</a>&gt;
   * CVE-2015-3340
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3340">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3340</a>&gt;