SUSE-SU-2015:1302-1

Advisory lineage Upstream: 2 Downstream: 0
Published: 17 Jul 2015, 09:08
Last modified:04 Feb 2026, 02:25

Vulnerability Summary

Overall Risk (default)
minimal
0/100
CVSS Score
No data
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

17 Jul 2015, 09:08
Published
Vulnerability first disclosed
04 Feb 2026, 02:25
Last Modified
Vulnerability information updated

Description

Security update for xen xen was updated to fix two security issues. These security issues were fixed: - CVE-2015-3259: xl command line config handling stack overflow (bsc#935634, XSA-137). - CVE-2015-5154: Host code execution via IDE subsystem CD-ROM (bsc#938344). These non-security issues were fixed: - Restart of xencommons service did lead to loss of xenstore data (bsc#935256). - Kdump did not work in a XEN environment (bsc#925466).

Affected Systems

  • suse•xen&distro=SUSE Linux Enterprise Desktop 12

    < 4.4.2_08-22.5.1

  • suse•xen&distro=SUSE Linux Enterprise Server 12

    < 4.4.2_08-22.5.1

  • suse•xen&distro=SUSE Linux Enterprise Server for SAP Applications 12

    < 4.4.2_08-22.5.1

  • suse•xen&distro=SUSE Linux Enterprise Software Development Kit 12

    < 4.4.2_08-22.5.1

References (7)