{"schemaVersion":3,"id":"SUSE-SU-2016:1154-1","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Security update for xen\n\nxen was updated to fix 27 security issues.\n\nThese security issues were fixed:\n- CVE-2013-4533: Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s->rx_level value in a savevm image (bsc#864655).\n- CVE-2013-4534: Buffer overflow in hw/intc/openpic.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via vectors related to IRQDest elements (bsc#864811).\n- CVE-2013-4537: The ssi_sd_transfer function in hw/sd/ssi-sd.c allowed remote attackers to execute arbitrary code via a crafted arglen value in a savevm image (bsc#864391).\n- CVE-2013-4538: Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c allowed remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted (1) cmd_len, (2) row, or (3) col values; (4) row_start and row_end values; or (5) col_star and col_end values in a savevm image (bsc#864769).\n- CVE-2013-4539: Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c might have allowed remote attackers to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image (bsc#864805).\n- CVE-2014-0222: Integer overflow in the qcow_open function in block/qcow.c allowed remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image (bsc#877642).\n- CVE-2014-3640: The sosendto function in slirp/udp.c allowed local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket (bsc#897654).\n- CVE-2014-3689: The vmware-vga driver (hw/display/vmware_vga.c) allowed local guest users to write to qemu memory locations and gain privileges via unspecified parameters related to rectangle handling (bsc#901508).\n- CVE-2014-7815: The set_pixel_format function in ui/vnc.c allowed remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value (bsc#902737).\n- CVE-2015-5278: Infinite loop in ne2000_receive() function (bsc#945989).\n- CVE-2015-7512: Buffer overflow in the pcnet_receive function in hw/net/pcnet.c, when a guest NIC has a larger MTU, allowed remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet (bsc#957162).\n- CVE-2015-8504: VNC: floating point exception (bsc#958491).\n- CVE-2015-8550: Paravirtualized drivers were incautious about shared memory contents (XSA-155) (bsc#957988).\n- CVE-2015-8554: qemu-dm buffer overrun in MSI-X handling (XSA-164) (bsc#958007).\n- CVE-2015-8555: Information leak in legacy x86 FPU/XMM initialization (XSA-165) (bsc#958009).\n- CVE-2015-8558: Infinite loop in ehci_advance_state resulted in DoS (bsc#959005).\n- CVE-2015-8743: ne2000: OOB memory access in ioport r/w functions (bsc#960725).\n- CVE-2015-8745: Reading IMR registers lead to a crash via assert(2) call (bsc#960707).\n- CVE-2016-1570: The PV superpage functionality in arch/x86/mm.c allowed local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page identifier (MFN) to the (1) MMUEXT_MARK_SUPER or (2) MMUEXT_UNMARK_SUPER sub-op in the HYPERVISOR_mmuext_op hypercall or (3) unknown vectors related to page table updates (bsc#960861).\n- CVE-2016-1571: VMX: intercept issue with INVLPG on non-canonical address (XSA-168) (bsc#960862).\n- CVE-2016-1714: nvram: OOB r/w access in processing firmware configurations (bsc#961691).\n- CVE-2016-1981: e1000 infinite loop in start_xmit and e1000_receive_iov routines (bsc#963782).\n- CVE-2016-2270: Xen allowed local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings (bsc#965315).\n- CVE-2016-2271: VMX when using an Intel or Cyrix CPU, allowed local HVM guest users to cause a denial of service (guest crash) via vectors related to a non-canonical RIP (bsc#965317).\n- CVE-2016-2391: usb: multiple eof_timers in ohci module lead to NULL pointer dereference (bsc#967013).\n- CVE-2016-2841: ne2000: Infinite loop in ne2000_receive (bsc#969350).\n- XSA-166: ioreq handling possibly susceptible to multiple read issue (bsc#958523).\n\nThis non-security issue was fixed:\n- bsc#967630: Discrepancy in reported memory size with correction XSA-153 for xend","dates":{"published":"2016-04-26T10:49:46.000Z","modified":"2026-02-04T02:48:01.272Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":null,"severity":"unknown","version":null,"versionLabel":null,"source":null,"vector":null,"computed":false,"selection":"none"},"metrics":[]},"epss":{"probability":null,"percentile":null,"severity":"unknown","asOf":null,"change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[],"last30":[]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"suse","product":"xen&distro=SUSE Linux Enterprise Server 11 SP2-LTSS","name":"xen","label":"xen&distro=SUSE Linux Enterprise Server 11 SP2-LTSS","ecosystem":"SUSE Linux Enterprise","cpePart":null,"purl":"pkg:rpm/suse/xen&distro=SUSE Linux Enterprise Server 11 SP2-LTSS","purlType":"rpm","versions":[{"text":"< 4.1.6_08-26.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.1.6_08-26.1","eol":null,"hubHref":null}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20161154-1/","label":"www.suse.com/support/update/announcement/2016/suse-su-20161154-1/","hostname":"www.suse.com","tags":["Advisory"]},{"url":"https://bugzilla.suse.com/864391","label":"bugzilla.suse.com/864391","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/864655","label":"bugzilla.suse.com/864655","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/864769","label":"bugzilla.suse.com/864769","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/864805","label":"bugzilla.suse.com/864805","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/864811","label":"bugzilla.suse.com/864811","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/877642","label":"bugzilla.suse.com/877642","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/897654","label":"bugzilla.suse.com/897654","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/901508","label":"bugzilla.suse.com/901508","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/902737","label":"bugzilla.suse.com/902737","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/945989","label":"bugzilla.suse.com/945989","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/957162","label":"bugzilla.suse.com/957162","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/957988","label":"bugzilla.suse.com/957988","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/958007","label":"bugzilla.suse.com/958007","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/958009","label":"bugzilla.suse.com/958009","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/958491","label":"bugzilla.suse.com/958491","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/958523","label":"bugzilla.suse.com/958523","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/959005","label":"bugzilla.suse.com/959005","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/960707","label":"bugzilla.suse.com/960707","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/960725","label":"bugzilla.suse.com/960725","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/960861","label":"bugzilla.suse.com/960861","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/960862","label":"bugzilla.suse.com/960862","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/961691","label":"bugzilla.suse.com/961691","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/963782","label":"bugzilla.suse.com/963782","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/965315","label":"bugzilla.suse.com/965315","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/965317","label":"bugzilla.suse.com/965317","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/967013","label":"bugzilla.suse.com/967013","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/967630","label":"bugzilla.suse.com/967630","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://bugzilla.suse.com/969350","label":"bugzilla.suse.com/969350","hostname":"bugzilla.suse.com","tags":["REPORT"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4533","label":"www.suse.com/security/cve/CVE-2013-4533","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4534","label":"www.suse.com/security/cve/CVE-2013-4534","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4537","label":"www.suse.com/security/cve/CVE-2013-4537","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4538","label":"www.suse.com/security/cve/CVE-2013-4538","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4539","label":"www.suse.com/security/cve/CVE-2013-4539","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2014-0222","label":"www.suse.com/security/cve/CVE-2014-0222","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3640","label":"www.suse.com/security/cve/CVE-2014-3640","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2014-3689","label":"www.suse.com/security/cve/CVE-2014-3689","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2014-7815","label":"www.suse.com/security/cve/CVE-2014-7815","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-5278","label":"www.suse.com/security/cve/CVE-2015-5278","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-7512","label":"www.suse.com/security/cve/CVE-2015-7512","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8504","label":"www.suse.com/security/cve/CVE-2015-8504","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8550","label":"www.suse.com/security/cve/CVE-2015-8550","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8554","label":"www.suse.com/security/cve/CVE-2015-8554","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8555","label":"www.suse.com/security/cve/CVE-2015-8555","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8558","label":"www.suse.com/security/cve/CVE-2015-8558","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8743","label":"www.suse.com/security/cve/CVE-2015-8743","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2015-8745","label":"www.suse.com/security/cve/CVE-2015-8745","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1570","label":"www.suse.com/security/cve/CVE-2016-1570","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1571","label":"www.suse.com/security/cve/CVE-2016-1571","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1714","label":"www.suse.com/security/cve/CVE-2016-1714","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1981","label":"www.suse.com/security/cve/CVE-2016-1981","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2270","label":"www.suse.com/security/cve/CVE-2016-2270","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2271","label":"www.suse.com/security/cve/CVE-2016-2271","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2391","label":"www.suse.com/security/cve/CVE-2016-2391","hostname":"www.suse.com","tags":["WEB"]},{"url":"https://www.suse.com/security/cve/CVE-2016-2841","label":"www.suse.com/security/cve/CVE-2016-2841","hostname":"www.suse.com","tags":["WEB"]}],"lineage":{"upstream":["CVE-2013-4533","CVE-2013-4534","CVE-2013-4537","CVE-2013-4538","CVE-2013-4539","CVE-2014-0222","CVE-2014-3640","CVE-2014-3689","CVE-2014-7815","CVE-2015-5278","CVE-2015-7512","CVE-2015-8504","CVE-2015-8550","CVE-2015-8554","CVE-2015-8555","CVE-2015-8558","CVE-2015-8743","CVE-2015-8745","CVE-2016-1570","CVE-2016-1571","CVE-2016-1714","CVE-2016-1981","CVE-2016-2270","CVE-2016-2271","CVE-2016-2391","CVE-2016-2841"],"downstream":[],"duplicates":[],"related":["CVE-2013-4533","CVE-2013-4534","CVE-2013-4537","CVE-2013-4538","CVE-2013-4539","CVE-2014-0222","CVE-2014-3640","CVE-2014-3689","CVE-2014-7815","CVE-2015-5278","CVE-2015-7512","CVE-2015-8504","CVE-2015-8550","CVE-2015-8554","CVE-2015-8555","CVE-2015-8558","CVE-2015-8743","CVE-2015-8745","CVE-2016-1570","CVE-2016-1571","CVE-2016-1714","CVE-2016-1981","CVE-2016-2270","CVE-2016-2271","CVE-2016-2391","CVE-2016-2841"]},"timeline":[{"kind":"published","date":"2016-04-26T10:49:46.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-02-04T02:48:01.272Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":0,"level":"minimal","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T11:11:01.992Z","stale":false,"partial":false}}