[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-SUSE-SU-2016:0873-1":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T08:53:30.047Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":100,"duplicates":101,"related":102,"reserved_at":9,"published_at":146,"modified_at":147,"state":9,"summary":148,"references_raw":150,"kevs":523,"epss":9,"epss_history":524,"metrics":525,"affected":526},"SUSE-SU-2016:0873-1","Security update for xen\n\nxen was updated to fix 44 security issues.\n\nThese security issues were fixed:\n- CVE-2013-4533: Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s->rx_level value in a savevm image (bsc#864655).\n- CVE-2013-4534: Buffer overflow in hw/intc/openpic.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via vectors related to IRQDest elements (bsc#864811).\n- CVE-2013-4537: The ssi_sd_transfer function in hw/sd/ssi-sd.c allowed remote attackers to execute arbitrary code via a crafted arglen value in a savevm image (bsc#864391).\n- CVE-2013-4538: Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c allowed remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted (1) cmd_len, (2) row, or (3) col values; (4) row_start and row_end values; or (5) col_star and col_end values in a savevm image (bsc#864769).\n- CVE-2013-4539: Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c might have allowed remote attackers to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image (bsc#864805).\n- CVE-2014-0222: Integer overflow in the qcow_open function in block/qcow.c allowed remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image (bsc#877642).\n- CVE-2014-3640: The sosendto function in slirp/udp.c allowed local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket (bsc#897654).\n- CVE-2014-3689: The vmware-vga driver (hw/display/vmware_vga.c) allowed local guest users to write to qemu memory locations and gain privileges via unspecified parameters related to rectangle handling (bsc#901508).\n- CVE-2014-7815: The set_pixel_format function in ui/vnc.c allowed remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value (bsc#902737).\n- CVE-2014-9718: The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality had multiple interpretations of a function's return value, which allowed guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and system crash) via a PRDT with zero complete sectors, related to the bmdma_prepare_buf and ahci_dma_prepare_buf functions (bsc#928393).\n- CVE-2015-1779: The VNC websocket frame decoder allowed remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section (bsc#924018).\n- CVE-2015-5278: Infinite loop in ne2000_receive() function (bsc#945989).\n- CVE-2015-6855: hw/ide/core.c did not properly restrict the commands accepted by an ATAPI device, which allowed guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash (bsc#945404).\n- CVE-2015-7512: Buffer overflow in the pcnet_receive function in hw/net/pcnet.c, when a guest NIC has a larger MTU, allowed remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet (bsc#957162).\n- CVE-2015-7549: pci: NULL pointer dereference issue (bsc#958917).\n- CVE-2015-8345: eepro100: infinite loop in processing command block list (bsc#956829).\n- CVE-2015-8504: VNC: floating point exception (bsc#958491).\n- CVE-2015-8550: Paravirtualized drivers were incautious about shared memory contents (XSA-155) (bsc#957988).\n- CVE-2015-8554: qemu-dm buffer overrun in MSI-X handling (XSA-164) (bsc#958007).\n- CVE-2015-8555: Information leak in legacy x86 FPU/XMM initialization (XSA-165) (bsc#958009).\n- CVE-2015-8558: Infinite loop in ehci_advance_state resulted in DoS (bsc#959005).\n- CVE-2015-8567: vmxnet3: host memory leakage (bsc#959387).\n- CVE-2015-8568: vmxnet3: host memory leakage (bsc#959387).\n- CVE-2015-8613: SCSI: stack based buffer overflow in megasas_ctrl_get_info (bsc#961358).\n- CVE-2015-8619: Stack based OOB write in hmp_sendkey routine (bsc#960334).\n- CVE-2015-8743: ne2000: OOB memory access in ioport r/w functions (bsc#960725).\n- CVE-2015-8744: vmxnet3: Incorrect l2 header validation lead to a crash via assert(2) call (bsc#960835).\n- CVE-2015-8745: Reading IMR registers lead to a crash via assert(2) call (bsc#960707).\n- CVE-2015-8817: OOB access in address_space_rw lead to segmentation fault (I) (bsc#969121).\n- CVE-2015-8818: OOB access in address_space_rw lead to segmentation fault (II) (bsc#969122).\n- CVE-2016-1568: AHCI use-after-free vulnerability in aio port commands (bsc#961332).\n- CVE-2016-1570: The PV superpage functionality in arch/x86/mm.c allowed local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page identifier (MFN) to the (1) MMUEXT_MARK_SUPER or (2) MMUEXT_UNMARK_SUPER sub-op in the HYPERVISOR_mmuext_op hypercall or (3) unknown vectors related to page table updates (bsc#960861).\n- CVE-2016-1571: VMX: intercept issue with INVLPG on non-canonical address (XSA-168) (bsc#960862).\n- CVE-2016-1714: nvram: OOB r/w access in processing firmware configurations (bsc#961691).\n- CVE-2016-1922: NULL pointer dereference in vapic_write() (bsc#962320).\n- CVE-2016-1981: e1000 infinite loop in start_xmit and e1000_receive_iov routines (bsc#963782).\n- CVE-2016-2198: EHCI NULL pointer dereference in ehci_caps_write (bsc#964413).\n- CVE-2016-2270: Xen allowed local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings (bsc#965315).\n- CVE-2016-2271: VMX when using an Intel or Cyrix CPU, allowed local HVM guest users to cause a denial of service (guest crash) via vectors related to a non-canonical RIP (bsc#965317).\n- CVE-2016-2391: usb: multiple eof_timers in ohci module lead to NULL pointer dereference (bsc#967013).\n- CVE-2016-2392: NULL pointer dereference in remote NDIS control message handling (bsc#967012).\n- CVE-2016-2538: Integer overflow in remote NDIS control message handling (bsc#967969).\n- CVE-2016-2841: ne2000: Infinite loop in ne2000_receive (bsc#969350).\n- XSA-166: ioreq handling possibly susceptible to multiple read issue (bsc#958523).\n\nThese non-security issues were fixed:\n- bsc#954872: script block-dmmd not working as expected \n- bsc#957698: DOM0 can't bring up on Dell PC\n- bsc#963923: domain weights not honored when sched-credit tslice is reduced\n- bsc#959332: SLES12SP1 PV guest is unreachable when restored or migrated\n- bsc#959695: Missing docs for xen\n",null,[],[],[],[14,16,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98],{"_key":15},"CVE-2013-4533",{"_key":17},"CVE-2013-4534",{"_key":19},"CVE-2013-4537",{"_key":21},"CVE-2013-4538",{"_key":23},"CVE-2013-4539",{"_key":25},"CVE-2014-0222",{"_key":27},"CVE-2014-3640",{"_key":29},"CVE-2014-3689",{"_key":31},"CVE-2014-7815",{"_key":33},"CVE-2014-9718",{"_key":35},"CVE-2015-1779",{"_key":37},"CVE-2015-5278",{"_key":39},"CVE-2015-6855",{"_key":41},"CVE-2015-7512",{"_key":43},"CVE-2015-7549",{"_key":45},"CVE-2015-8345",{"_key":47},"CVE-2015-8504",{"_key":49},"CVE-2015-8550",{"_key":51},"CVE-2015-8554",{"_key":53},"CVE-2015-8555",{"_key":55},"CVE-2015-8558",{"_key":57},"CVE-2015-8567",{"_key":59},"CVE-2015-8568",{"_key":61},"CVE-2015-8613",{"_key":63},"CVE-2015-8619",{"_key":65},"CVE-2015-8743",{"_key":67},"CVE-2015-8744",{"_key":69},"CVE-2015-8745",{"_key":71},"CVE-2015-8817",{"_key":73},"CVE-2015-8818",{"_key":75},"CVE-2016-1568",{"_key":77},"CVE-2016-1570",{"_key":79},"CVE-2016-1571",{"_key":81},"CVE-2016-1714",{"_key":83},"CVE-2016-1922",{"_key":85},"CVE-2016-1981",{"_key":87},"CVE-2016-2198",{"_key":89},"CVE-2016-2270",{"_key":91},"CVE-2016-2271",{"_key":93},"CVE-2016-2391",{"_key":95},"CVE-2016-2392",{"_key":97},"CVE-2016-2538",{"_key":99},"CVE-2016-2841",[],[],[103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145],{"_key":15},{"_key":17},{"_key":19},{"_key":21},{"_key":23},{"_key":25},{"_key":27},{"_key":29},{"_key":31},{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":49},{"_key":51},{"_key":53},{"_key":55},{"_key":57},{"_key":59},{"_key":61},{"_key":63},{"_key":65},{"_key":67},{"_key":69},{"_key":71},{"_key":73},{"_key":75},{"_key":77},{"_key":79},{"_key":81},{"_key":83},{"_key":85},{"_key":87},{"_key":89},{"_key":91},{"_key":93},{"_key":95},{"_key":97},{"_key":99},"2016-03-24T08:10:03Z","2025-05-02T04:03:59.176752Z",{"cisa_kev":149,"cisa_ransomware":149,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":9},false,[151,157,162,166,170,174,178,182,186,190,194,198,202,206,210,214,218,222,226,230,234,238,242,246,250,254,258,262,266,270,274,278,282,286,290,294,298,302,306,310,314,318,322,326,330,334,338,342,346,350,355,359,363,367,371,375,379,383,387,391,395,399,403,407,411,415,419,423,427,431,435,439,443,447,451,455,459,463,467,471,475,479,483,487,491,495,499,503,507,511,515,519],{"url":152,"sources":153,"tags":155},"https://www.suse.com/support/update/announcement/2016/suse-su-20160873-1/",[154],"osv_suse",[156],"Advisory",{"url":158,"sources":159,"tags":160},"https://bugzilla.suse.com/864391",[154],[161],"REPORT",{"url":163,"sources":164,"tags":165},"https://bugzilla.suse.com/864655",[154],[161],{"url":167,"sources":168,"tags":169},"https://bugzilla.suse.com/864769",[154],[161],{"url":171,"sources":172,"tags":173},"https://bugzilla.suse.com/864805",[154],[161],{"url":175,"sources":176,"tags":177},"https://bugzilla.suse.com/864811",[154],[161],{"url":179,"sources":180,"tags":181},"https://bugzilla.suse.com/877642",[154],[161],{"url":183,"sources":184,"tags":185},"https://bugzilla.suse.com/897654",[154],[161],{"url":187,"sources":188,"tags":189},"https://bugzilla.suse.com/901508",[154],[161],{"url":191,"sources":192,"tags":193},"https://bugzilla.suse.com/902737",[154],[161],{"url":195,"sources":196,"tags":197},"https://bugzilla.suse.com/924018",[154],[161],{"url":199,"sources":200,"tags":201},"https://bugzilla.suse.com/928393",[154],[161],{"url":203,"sources":204,"tags":205},"https://bugzilla.suse.com/945404",[154],[161],{"url":207,"sources":208,"tags":209},"https://bugzilla.suse.com/945989",[154],[161],{"url":211,"sources":212,"tags":213},"https://bugzilla.suse.com/954872",[154],[161],{"url":215,"sources":216,"tags":217},"https://bugzilla.suse.com/956829",[154],[161],{"url":219,"sources":220,"tags":221},"https://bugzilla.suse.com/957162",[154],[161],{"url":223,"sources":224,"tags":225},"https://bugzilla.suse.com/957698",[154],[161],{"url":227,"sources":228,"tags":229},"https://bugzilla.suse.com/957988",[154],[161],{"url":231,"sources":232,"tags":233},"https://bugzilla.suse.com/958007",[154],[161],{"url":235,"sources":236,"tags":237},"https://bugzilla.suse.com/958009",[154],[161],{"url":239,"sources":240,"tags":241},"https://bugzilla.suse.com/958491",[154],[161],{"url":243,"sources":244,"tags":245},"https://bugzilla.suse.com/958523",[154],[161],{"url":247,"sources":248,"tags":249},"https://bugzilla.suse.com/958917",[154],[161],{"url":251,"sources":252,"tags":253},"https://bugzilla.suse.com/959005",[154],[161],{"url":255,"sources":256,"tags":257},"https://bugzilla.suse.com/959332",[154],[161],{"url":259,"sources":260,"tags":261},"https://bugzilla.suse.com/959387",[154],[161],{"url":263,"sources":264,"tags":265},"https://bugzilla.suse.com/959695",[154],[161],{"url":267,"sources":268,"tags":269},"https://bugzilla.suse.com/960334",[154],[161],{"url":271,"sources":272,"tags":273},"https://bugzilla.suse.com/960707",[154],[161],{"url":275,"sources":276,"tags":277},"https://bugzilla.suse.com/960725",[154],[161],{"url":279,"sources":280,"tags":281},"https://bugzilla.suse.com/960835",[154],[161],{"url":283,"sources":284,"tags":285},"https://bugzilla.suse.com/960861",[154],[161],{"url":287,"sources":288,"tags":289},"https://bugzilla.suse.com/960862",[154],[161],{"url":291,"sources":292,"tags":293},"https://bugzilla.suse.com/961332",[154],[161],{"url":295,"sources":296,"tags":297},"https://bugzilla.suse.com/961358",[154],[161],{"url":299,"sources":300,"tags":301},"https://bugzilla.suse.com/961691",[154],[161],{"url":303,"sources":304,"tags":305},"https://bugzilla.suse.com/962320",[154],[161],{"url":307,"sources":308,"tags":309},"https://bugzilla.suse.com/963782",[154],[161],{"url":311,"sources":312,"tags":313},"https://bugzilla.suse.com/963923",[154],[161],{"url":315,"sources":316,"tags":317},"https://bugzilla.suse.com/964413",[154],[161],{"url":319,"sources":320,"tags":321},"https://bugzilla.suse.com/965315",[154],[161],{"url":323,"sources":324,"tags":325},"https://bugzilla.suse.com/965317",[154],[161],{"url":327,"sources":328,"tags":329},"https://bugzilla.suse.com/967012",[154],[161],{"url":331,"sources":332,"tags":333},"https://bugzilla.suse.com/967013",[154],[161],{"url":335,"sources":336,"tags":337},"https://bugzilla.suse.com/967969",[154],[161],{"url":339,"sources":340,"tags":341},"https://bugzilla.suse.com/969121",[154],[161],{"url":343,"sources":344,"tags":345},"https://bugzilla.suse.com/969122",[154],[161],{"url":347,"sources":348,"tags":349},"https://bugzilla.suse.com/969350",[154],[161],{"url":351,"sources":352,"tags":353},"https://www.suse.com/security/cve/CVE-2013-4533",[154],[354],"WEB",{"url":356,"sources":357,"tags":358},"https://www.suse.com/security/cve/CVE-2013-4534",[154],[354],{"url":360,"sources":361,"tags":362},"https://www.suse.com/security/cve/CVE-2013-4537",[154],[354],{"url":364,"sources":365,"tags":366},"https://www.suse.com/security/cve/CVE-2013-4538",[154],[354],{"url":368,"sources":369,"tags":370},"https://www.suse.com/security/cve/CVE-2013-4539",[154],[354],{"url":372,"sources":373,"tags":374},"https://www.suse.com/security/cve/CVE-2014-0222",[154],[354],{"url":376,"sources":377,"tags":378},"https://www.suse.com/security/cve/CVE-2014-3640",[154],[354],{"url":380,"sources":381,"tags":382},"https://www.suse.com/security/cve/CVE-2014-3689",[154],[354],{"url":384,"sources":385,"tags":386},"https://www.suse.com/security/cve/CVE-2014-7815",[154],[354],{"url":388,"sources":389,"tags":390},"https://www.suse.com/security/cve/CVE-2014-9718",[154],[354],{"url":392,"sources":393,"tags":394},"https://www.suse.com/security/cve/CVE-2015-1779",[154],[354],{"url":396,"sources":397,"tags":398},"https://www.suse.com/security/cve/CVE-2015-5278",[154],[354],{"url":400,"sources":401,"tags":402},"https://www.suse.com/security/cve/CVE-2015-6855",[154],[354],{"url":404,"sources":405,"tags":406},"https://www.suse.com/security/cve/CVE-2015-7512",[154],[354],{"url":408,"sources":409,"tags":410},"https://www.suse.com/security/cve/CVE-2015-7549",[154],[354],{"url":412,"sources":413,"tags":414},"https://www.suse.com/security/cve/CVE-2015-8345",[154],[354],{"url":416,"sources":417,"tags":418},"https://www.suse.com/security/cve/CVE-2015-8504",[154],[354],{"url":420,"sources":421,"tags":422},"https://www.suse.com/security/cve/CVE-2015-8550",[154],[354],{"url":424,"sources":425,"tags":426},"https://www.suse.com/security/cve/CVE-2015-8554",[154],[354],{"url":428,"sources":429,"tags":430},"https://www.suse.com/security/cve/CVE-2015-8555",[154],[354],{"url":432,"sources":433,"tags":434},"https://www.suse.com/security/cve/CVE-2015-8558",[154],[354],{"url":436,"sources":437,"tags":438},"https://www.suse.com/security/cve/CVE-2015-8567",[154],[354],{"url":440,"sources":441,"tags":442},"https://www.suse.com/security/cve/CVE-2015-8568",[154],[354],{"url":444,"sources":445,"tags":446},"https://www.suse.com/security/cve/CVE-2015-8613",[154],[354],{"url":448,"sources":449,"tags":450},"https://www.suse.com/security/cve/CVE-2015-8619",[154],[354],{"url":452,"sources":453,"tags":454},"https://www.suse.com/security/cve/CVE-2015-8743",[154],[354],{"url":456,"sources":457,"tags":458},"https://www.suse.com/security/cve/CVE-2015-8744",[154],[354],{"url":460,"sources":461,"tags":462},"https://www.suse.com/security/cve/CVE-2015-8745",[154],[354],{"url":464,"sources":465,"tags":466},"https://www.suse.com/security/cve/CVE-2015-8817",[154],[354],{"url":468,"sources":469,"tags":470},"https://www.suse.com/security/cve/CVE-2015-8818",[154],[354],{"url":472,"sources":473,"tags":474},"https://www.suse.com/security/cve/CVE-2016-1568",[154],[354],{"url":476,"sources":477,"tags":478},"https://www.suse.com/security/cve/CVE-2016-1570",[154],[354],{"url":480,"sources":481,"tags":482},"https://www.suse.com/security/cve/CVE-2016-1571",[154],[354],{"url":484,"sources":485,"tags":486},"https://www.suse.com/security/cve/CVE-2016-1714",[154],[354],{"url":488,"sources":489,"tags":490},"https://www.suse.com/security/cve/CVE-2016-1922",[154],[354],{"url":492,"sources":493,"tags":494},"https://www.suse.com/security/cve/CVE-2016-1981",[154],[354],{"url":496,"sources":497,"tags":498},"https://www.suse.com/security/cve/CVE-2016-2198",[154],[354],{"url":500,"sources":501,"tags":502},"https://www.suse.com/security/cve/CVE-2016-2270",[154],[354],{"url":504,"sources":505,"tags":506},"https://www.suse.com/security/cve/CVE-2016-2271",[154],[354],{"url":508,"sources":509,"tags":510},"https://www.suse.com/security/cve/CVE-2016-2391",[154],[354],{"url":512,"sources":513,"tags":514},"https://www.suse.com/security/cve/CVE-2016-2392",[154],[354],{"url":516,"sources":517,"tags":518},"https://www.suse.com/security/cve/CVE-2016-2538",[154],[354],{"url":520,"sources":521,"tags":522},"https://www.suse.com/security/cve/CVE-2016-2841",[154],[354],[],[],[],[527,540,544,548],{"ecosystem":528,"name":529,"vendor":530,"product":531,"cpe_part":9,"purl_type":532,"purl_namespace":530,"purl_name":531,"source":9,"versions":533},"SUSE Linux Enterprise","xen","suse","xen&distro=SUSE Linux Enterprise Desktop 12 SP1","rpm",[534],{"version":535,"is_range":536,"range_type":537,"version_start":9,"version_start_type":9,"version_end":538,"version_end_type":539,"fixed_in":9},"lt4_5_2_06_7_1",true,"ecosystem","4.5.2_06-7.1","excluding",{"ecosystem":528,"name":529,"vendor":530,"product":541,"cpe_part":9,"purl_type":532,"purl_namespace":530,"purl_name":541,"source":9,"versions":542},"xen&distro=SUSE Linux Enterprise Server 12 SP1",[543],{"version":535,"is_range":536,"range_type":537,"version_start":9,"version_start_type":9,"version_end":538,"version_end_type":539,"fixed_in":9},{"ecosystem":528,"name":529,"vendor":530,"product":545,"cpe_part":9,"purl_type":532,"purl_namespace":530,"purl_name":545,"source":9,"versions":546},"xen&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP1",[547],{"version":535,"is_range":536,"range_type":537,"version_start":9,"version_start_type":9,"version_end":538,"version_end_type":539,"fixed_in":9},{"ecosystem":528,"name":529,"vendor":530,"product":549,"cpe_part":9,"purl_type":532,"purl_namespace":530,"purl_name":549,"source":9,"versions":550},"xen&distro=SUSE Linux Enterprise Software Development Kit 12 SP1",[551],{"version":535,"is_range":536,"range_type":537,"version_start":9,"version_start_type":9,"version_end":538,"version_end_type":539,"fixed_in":9}]