Test ID:	1.3.6.1.4.1.25623.1.1.4.2021.2957.1
Category:	SuSE Local Security Checks
Title:	SUSE: Security Advisory (SUSE-SU-2021:2957-1)
Summary:	The remote host is missing an update for the 'xen' package(s) announced via the SUSE-SU-2021:2957-1 advisory.
Description:	Summary: The remote host is missing an update for the 'xen' package(s) announced via the SUSE-SU-2021:2957-1 advisory. Vulnerability Insight: This update for xen fixes the following issues: CVE-2021-3594: slirp: invalid pointer initialization may lead to information disclosure (udp)(bsc#1187378). CVE-2021-3595: slirp: invalid pointer initialization may lead to information disclosure (tftp)(bsc#1187376). CVE-2021-28698: long running loops in grant table handling (XSA-380)(bsc#1189378). CVE-2021-28699: inadequate grant-v2 status frames array bounds check (XSA-382)(bsc#1189380). CVE-2021-20255: Fixed stack overflow via infinite recursion in eepro100 (bsc#1182654) CVE-2021-28690: xen: x86: TSX Async Abort protections not restored after S3 (bsc#1186434) CVE-2021-28692: xen: inappropriate x86 IOMMU timeout detection / handling (bsc#1186429) CVE-2021-28694,CVE-2021-28695,CVE-2021-28696: IOMMU page mapping issues on x86 (XSA-378)(bsc#1189373). CVE-2021-0089: xen: Speculative Code Store Bypass (bsc#1186433) CVE-2021-28697: grant table v2 status pages may remain accessible after de-allocation (XSA-379)(bsc#1189376). CVE-2021-3592: slirp: invalid pointer initialization may lead to information disclosure (bootp)(bsc#1187369). Prevent superpage allocation in the LAPIC and ACPI_INFO range (bsc#1189882). Affected Software/OS: 'xen' package(s) on HPE Helion Openstack 8, SUSE Linux Enterprise Server 12-SP3, SUSE Linux Enterprise Server for SAP 12-SP3, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud Crowbar 8. Solution: Please install the updated package(s). CVSS Score: 5.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-0089 Debian Security Information: DSA-4931 (Google Search) https://www.debian.org/security/2021/dsa-4931 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H36U6CNREC436W6GYO7QUMJIVEA35SCV/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SVA2NY26MMXOODUMYZN5DCU3FXMBMBOB/ https://security.gentoo.org/glsa/202107-30 https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00516.html http://www.openwall.com/lists/oss-security/2021/06/10/10 http://www.openwall.com/lists/oss-security/2021/06/10/11 http://www.openwall.com/lists/oss-security/2021/06/10/1 Common Vulnerability Exposure (CVE) ID: CVE-2021-3592 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GCKWZWY64EHTOQMLVLTSZ4AA27EWRJMH/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SGPQZFVJCFGDSISFXPCQTTBBD7QZLJKI/ https://security.gentoo.org/glsa/202107-44 https://bugzilla.redhat.com/show_bug.cgi?id=1970484 https://lists.debian.org/debian-lts-announce/2021/09/msg00000.html https://lists.debian.org/debian-lts-announce/2021/09/msg00004.html Common Vulnerability Exposure (CVE) ID: CVE-2021-3594 https://bugzilla.redhat.com/show_bug.cgi?id=1970491 Common Vulnerability Exposure (CVE) ID: CVE-2021-3595 https://bugzilla.redhat.com/show_bug.cgi?id=1970489
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.