SUSE-SU-2015:1299-1
Advisory lineage Upstream: 2 Downstream: 0
Upstream
Published: 17 Jul 2015, 09:12
Last modified:04 Feb 2026, 03:40
Vulnerability Summary
Overall Risk (default)
minimal
0/100 CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
17 Jul 2015, 09:12
Published
Vulnerability first disclosed
04 Feb 2026, 03:40
Last Modified
Vulnerability information updated
Description
Security update for xen xen was updated to fix two security issues. These security issues were fixed: - CVE-2015-3259: xl command line config handling stack overflow (bsc#935634, XSA-137). - CVE-2015-5154: Host code execution via IDE subsystem CD-ROM (bsc#938344). This non-security issue was fixed: - Kdump did not work in a XEN environment (bsc#925466).
Affected Systems
- suse•xen&distro=SUSE Linux Enterprise Desktop 11 SP4
< 4.4.2_10-5.1
- suse•xen&distro=SUSE Linux Enterprise Server 11 SP4
< 4.4.2_10-5.1
- suse•xen&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4
< 4.4.2_10-5.1
- suse•xen&distro=SUSE Linux Enterprise Software Development Kit 11 SP4
< 4.4.2_10-5.1