{"schema_version":"1.7.3","id":"SUSE-SU-2020:0388-1","published":"2020-02-17T14:03:16Z","modified":"2026-02-04T02:19:31.700959Z","related":["CVE-2018-12207","CVE-2018-19965","CVE-2019-11135","CVE-2019-12067","CVE-2019-12068","CVE-2019-12155","CVE-2019-14378","CVE-2019-15890","CVE-2019-17340","CVE-2019-17341","CVE-2019-17342","CVE-2019-17343","CVE-2019-17344","CVE-2019-17347","CVE-2019-18420","CVE-2019-18421","CVE-2019-18424","CVE-2019-18425","CVE-2019-19577","CVE-2019-19578","CVE-2019-19579","CVE-2019-19580","CVE-2019-19581","CVE-2019-19583","CVE-2020-7211"],"upstream":["CVE-2018-12207","CVE-2018-19965","CVE-2019-11135","CVE-2019-12067","CVE-2019-12068","CVE-2019-12155","CVE-2019-14378","CVE-2019-15890","CVE-2019-17340","CVE-2019-17341","CVE-2019-17342","CVE-2019-17343","CVE-2019-17344","CVE-2019-17347","CVE-2019-18420","CVE-2019-18421","CVE-2019-18424","CVE-2019-18425","CVE-2019-19577","CVE-2019-19578","CVE-2019-19579","CVE-2019-19580","CVE-2019-19581","CVE-2019-19583","CVE-2020-7211"],"summary":"Security update for xen","details":"This update for xen fixes the following issues:\n\n- CVE-2018-12207: Fixed a race condition where untrusted virtual machines could have been using the Instruction Fetch Unit of the Intel CPU to cause a Machine Exception during Page Size Change, causing the CPU core to be non-functional (bsc#1155945 XSA-304).\n- CVE-2018-19965: Fixed a DoS from attempting to use INVPCID with a non-canonical addresses (bsc#1115045 XSA-279).\n- CVE-2019-11135: Aborting an asynchronous TSX operation on Intel CPUs with Transactional Memory support could be used to facilitate side-channel information leaks out of microarchitectural buffers, similar to the previously described 'Microarchitectural Data Sampling' attack. (bsc#1152497 XSA-305).\n- CVE-2019-12067: Fixed a null pointer dereference in QEMU AHCI (bsc#1145652).\n- CVE-2019-12068: Fixed an infinite loop while executing script (bsc#1146874).\n- CVE-2019-12155: Fixed a null pointer dereference while releasing spice resources (bsc#1135905).\n- CVE-2019-14378: Fixed a heap buffer overflow during packet reassembly in slirp networking implementation (bsc#1143797).\n- CVE-2019-15890: Fixed a use-after-free during packet reassembly (bsc#1149813).\n- CVE-2019-17340: Fixed grant table transfer issues on large hosts (XSA-284 bsc#1126140).\n- CVE-2019-17341: Fixed a race with pass-through device hotplug (XSA-285 bsc#1126141).\n- CVE-2019-17342: Fixed steal_page violating page_struct access discipline (XSA-287 bsc#1126192).\n- CVE-2019-17343: Fixed an inconsistent PV IOMMU discipline (XSA-288 bsc#1126195).\n- CVE-2019-17344: Fixed a missing preemption in x86 PV page table unvalidation (XSA-290 bsc#1126196).\n- CVE-2019-17347: Fixed a PV kernel context switch corruption (XSA-293 bsc#1126201).\n- CVE-2019-18420: Fixed a hypervisor crash that could be caused by malicious x86 PV guests, resulting in a denial of service (bsc#1154448 XSA-296).\n- CVE-2019-18421: Fixed a privilege escalation through malicious PV guest administrators (bsc#1154458 XSA-299).\n- CVE-2019-18424: Fixed a privilege escalation through DMA to physical devices by untrusted domains (bsc#1154461 XSA-302).  \n- CVE-2019-18425: Fixed a privilege escalation from 32-bit PV guest used mode (bsc#1154456 XSA-298).\n- CVE-2019-19577: Fixed an issue where a malicious guest administrator could have caused Xen to access data structures while they are being modified leading to a crash (bsc#1158007 XSA-311). \n- CVE-2019-19578: Fixed an issue where a malicious or buggy PV guest could have caused hypervisor crash resulting in denial of service affecting the entire host (bsc#1158005 XSA-309).\n- CVE-2019-19579: Fixed a privilege escalation where an untrusted domain with access to a physical device can DMA into host memory (bsc#1157888 XSA-306).\n- CVE-2019-19580: Fixed a privilege escalation where a malicious PV guest administrator could have been able to escalate their privilege to that of the host (bsc#1158006 XSA-310).\n- CVE-2019-19581: Fixed a potential out of bounds on 32-bit Arm (bsc#1158003 XSA-307).\n- CVE-2019-19583: Fixed improper checks which could have allowed HVM/PVH guest userspace code to crash the guest, leading to a guest denial of service (bsc#1158004 XSA-308).\n","affected":[{"package":{"name":"xen","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP1","purl":"pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP1"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.5_28-22.64.1"}]}],"ecosystem_specific":{"binaries":[{"xen":"4.5.5_28-22.64.1","xen-doc-html":"4.5.5_28-22.64.1","xen-kmp-default":"4.5.5_28_k3.12.74_60.64.124-22.64.1","xen-libs":"4.5.5_28-22.64.1","xen-libs-32bit":"4.5.5_28-22.64.1","xen-tools":"4.5.5_28-22.64.1","xen-tools-domU":"4.5.5_28-22.64.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0388-1.json"}},{"package":{"name":"xen","ecosystem":"SUSE:Linux Enterprise Server 12 SP1-LTSS","purl":"pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP1-LTSS"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.5_28-22.64.1"}]}],"ecosystem_specific":{"binaries":[{"xen":"4.5.5_28-22.64.1","xen-doc-html":"4.5.5_28-22.64.1","xen-kmp-default":"4.5.5_28_k3.12.74_60.64.124-22.64.1","xen-libs":"4.5.5_28-22.64.1","xen-libs-32bit":"4.5.5_28-22.64.1","xen-tools":"4.5.5_28-22.64.1","xen-tools-domU":"4.5.5_28-22.64.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2020:0388-1.json"}}],"references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2020/suse-su-20200388-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/1115045"},{"type":"REPORT","url":"https://bugzilla.suse.com/1126140"},{"type":"REPORT","url":"https://bugzilla.suse.com/1126141"},{"type":"REPORT","url":"https://bugzilla.suse.com/1126192"},{"type":"REPORT","url":"https://bugzilla.suse.com/1126195"},{"type":"REPORT","url":"https://bugzilla.suse.com/1126196"},{"type":"REPORT","url":"https://bugzilla.suse.com/1126201"},{"type":"REPORT","url":"https://bugzilla.suse.com/1135905"},{"type":"REPORT","url":"https://bugzilla.suse.com/1143797"},{"type":"REPORT","url":"https://bugzilla.suse.com/1145652"},{"type":"REPORT","url":"https://bugzilla.suse.com/1146874"},{"type":"REPORT","url":"https://bugzilla.suse.com/1149813"},{"type":"REPORT","url":"https://bugzilla.suse.com/1152497"},{"type":"REPORT","url":"https://bugzilla.suse.com/1154448"},{"type":"REPORT","url":"https://bugzilla.suse.com/1154456"},{"type":"REPORT","url":"https://bugzilla.suse.com/1154458"},{"type":"REPORT","url":"https://bugzilla.suse.com/1154461"},{"type":"REPORT","url":"https://bugzilla.suse.com/1155945"},{"type":"REPORT","url":"https://bugzilla.suse.com/1157888"},{"type":"REPORT","url":"https://bugzilla.suse.com/1158003"},{"type":"REPORT","url":"https://bugzilla.suse.com/1158004"},{"type":"REPORT","url":"https://bugzilla.suse.com/1158005"},{"type":"REPORT","url":"https://bugzilla.suse.com/1158006"},{"type":"REPORT","url":"https://bugzilla.suse.com/1158007"},{"type":"REPORT","url":"https://bugzilla.suse.com/1161181"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-12207"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2018-19965"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-11135"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-12067"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-12068"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-12155"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-14378"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-15890"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-17340"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-17341"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-17342"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-17343"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-17344"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-17347"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-18420"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-18421"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-18424"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-18425"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-19577"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-19578"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-19579"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-19580"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-19581"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2019-19583"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2020-7211"}]}