[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-SUSE-SU-2016:1318-1":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T14:53:31.930Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":104,"duplicates":105,"related":106,"reserved_at":9,"published_at":152,"modified_at":153,"state":9,"summary":154,"references_raw":156,"kevs":537,"epss":9,"epss_history":538,"metrics":539,"affected":540},"SUSE-SU-2016:1318-1","Security update for xen\n\nxen was updated to fix 46 security issues.\n\nThese security issues were fixed:\n- CVE-2013-4527: Buffer overflow in hw/timer/hpet.c might have allowed remote attackers to execute arbitrary code via vectors related to the number of timers (bsc#964746).\n- CVE-2013-4529: Buffer overflow in hw/pci/pcie_aer.c allowed remote attackers to cause a denial of service and possibly execute arbitrary code via a large log_num value in a savevm image (bsc#964929).\n- CVE-2013-4530: Buffer overflow in hw/ssi/pl022.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via crafted tx_fifo_head and rx_fifo_head values in a savevm image (bsc#964950).\n- CVE-2013-4533: Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s->rx_level value in a savevm image (bsc#964644).\n- CVE-2013-4534: Buffer overflow in hw/intc/openpic.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via vectors related to IRQDest elements (bsc#964452).\n- CVE-2013-4537: The ssi_sd_transfer function in hw/sd/ssi-sd.c allowed remote attackers to execute arbitrary code via a crafted arglen value in a savevm image (bsc#962642).\n- CVE-2013-4538: Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c allowed remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted (1) cmd_len, (2) row, or (3) col values; (4) row_start and row_end values; or (5) col_star and col_end values in a savevm image (bsc#962335).\n- CVE-2013-4539: Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c might have allowed remote attackers to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image (bsc#962758).\n- CVE-2014-0222: Integer overflow in the qcow_open function in block/qcow.c allowed remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image (bsc#964925).\n- CVE-2014-3640: The sosendto function in slirp/udp.c allowed local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket (bsc#965112).\n- CVE-2014-3689: The vmware-vga driver (hw/display/vmware_vga.c) allowed local guest users to write to qemu memory locations and gain privileges via unspecified parameters related to rectangle handling (bsc#962611).\n- CVE-2014-7815: The set_pixel_format function in ui/vnc.c allowed remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value (bsc#962627).\n- CVE-2014-9718: The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality had multiple interpretations of a function's return value, which allowed guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and system crash) via a PRDT with zero complete sectors, related to the bmdma_prepare_buf and ahci_dma_prepare_buf functions (bsc#964431).\n- CVE-2015-1779: The VNC websocket frame decoder allowed remote attackers to cause a denial of service (memory and CPU consumption) via a large (1) websocket payload or (2) HTTP headers section (bsc#962632).\n- CVE-2015-5278: Infinite loop in ne2000_receive() function (bsc#964947).\n- CVE-2015-6855: hw/ide/core.c did not properly restrict the commands accepted by an ATAPI device, which allowed guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash (bsc#965156).\n- CVE-2015-7512: Buffer overflow in the pcnet_receive function in hw/net/pcnet.c, when a guest NIC has a larger MTU, allowed remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet (bsc#962360).\n- CVE-2015-7549: pci: NULL pointer dereference issue (bsc#958918).\n- CVE-2015-8345: eepro100: infinite loop in processing command block list (bsc#956832).\n- CVE-2015-8504: VNC: floating point exception (bsc#958493).\n- CVE-2015-8550: Paravirtualized drivers were incautious about shared memory contents (XSA-155) (bsc#957988).\n- CVE-2015-8554: qemu-dm buffer overrun in MSI-X handling (XSA-164) (bsc#958007).\n- CVE-2015-8555: Information leak in legacy x86 FPU/XMM initialization (XSA-165) (bsc#958009).\n- CVE-2015-8558: Infinite loop in ehci_advance_state resulted in DoS (bsc#959006).\n- CVE-2015-8567: vmxnet3: host memory leakage (bsc#959387).\n- CVE-2015-8568: vmxnet3: host memory leakage (bsc#959387).\n- CVE-2015-8613: SCSI: stack based buffer overflow in megasas_ctrl_get_info (bsc#961358).\n- CVE-2015-8619: Stack based OOB write in hmp_sendkey routine (bsc#965269).\n- CVE-2015-8743: ne2000: OOB memory access in ioport r/w functions (bsc#960726).\n- CVE-2015-8744: vmxnet3: Incorrect l2 header validation lead to a crash via assert(2) call (bsc#960836).\n- CVE-2015-8745: Reading IMR registers lead to a crash via assert(2) call (bsc#960707).\n- CVE-2015-8817: OOB access in address_space_rw lead to segmentation fault (I) (bsc#969125).\n- CVE-2015-8818: OOB access in address_space_rw lead to segmentation fault (II) (bsc#969126).\n- CVE-2016-1568: AHCI use-after-free vulnerability in aio port commands (bsc#961332).\n- CVE-2016-1570: The PV superpage functionality in arch/x86/mm.c allowed local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page identifier (MFN) to the (1) MMUEXT_MARK_SUPER or (2) MMUEXT_UNMARK_SUPER sub-op in the HYPERVISOR_mmuext_op hypercall or (3) unknown vectors related to page table updates (bsc#960861).\n- CVE-2016-1571: VMX: intercept issue with INVLPG on non-canonical address (XSA-168) (bsc#960862).\n- CVE-2016-1714: nvram: OOB r/w access in processing firmware configurations (bsc#961692).\n- CVE-2016-1922: NULL pointer dereference in vapic_write() (bsc#962321).\n- CVE-2016-1981: e1000 infinite loop in start_xmit and e1000_receive_iov routines (bsc#963783).\n- CVE-2016-2198: EHCI NULL pointer dereference in ehci_caps_write (bsc#964415).\n- CVE-2016-2270: Xen allowed local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings (bsc#965315).\n- CVE-2016-2271: VMX when using an Intel or Cyrix CPU, allowed local HVM guest users to cause a denial of service (guest crash) via vectors related to a non-canonical RIP (bsc#965317).\n- CVE-2016-2391: usb: multiple eof_timers in ohci module lead to NULL pointer dereference (bsc#967101).\n- CVE-2016-2392: NULL pointer dereference in remote NDIS control message handling (bsc#967090).\n- CVE-2016-2538: Integer overflow in remote NDIS control message handling (bsc#968004).\n- XSA-166: ioreq handling possibly susceptible to multiple read issue (bsc#958523).\n\nThese non-security issues were fixed:\n- bsc#954872: script block-dmmd not working as expected \n- bsc#963923: domain weights not honored when sched-credit tslice is reduced\n- bsc#959695: Missing docs for xen\n",null,[],[],[],[14,16,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102],{"_key":15},"CVE-2013-4527",{"_key":17},"CVE-2013-4529",{"_key":19},"CVE-2013-4530",{"_key":21},"CVE-2013-4533",{"_key":23},"CVE-2013-4534",{"_key":25},"CVE-2013-4537",{"_key":27},"CVE-2013-4538",{"_key":29},"CVE-2013-4539",{"_key":31},"CVE-2014-0222",{"_key":33},"CVE-2014-3640",{"_key":35},"CVE-2014-3689",{"_key":37},"CVE-2014-7815",{"_key":39},"CVE-2014-9718",{"_key":41},"CVE-2015-1779",{"_key":43},"CVE-2015-5278",{"_key":45},"CVE-2015-6855",{"_key":47},"CVE-2015-7512",{"_key":49},"CVE-2015-7549",{"_key":51},"CVE-2015-8345",{"_key":53},"CVE-2015-8504",{"_key":55},"CVE-2015-8550",{"_key":57},"CVE-2015-8554",{"_key":59},"CVE-2015-8555",{"_key":61},"CVE-2015-8558",{"_key":63},"CVE-2015-8567",{"_key":65},"CVE-2015-8568",{"_key":67},"CVE-2015-8613",{"_key":69},"CVE-2015-8619",{"_key":71},"CVE-2015-8743",{"_key":73},"CVE-2015-8744",{"_key":75},"CVE-2015-8745",{"_key":77},"CVE-2015-8817",{"_key":79},"CVE-2015-8818",{"_key":81},"CVE-2016-1568",{"_key":83},"CVE-2016-1570",{"_key":85},"CVE-2016-1571",{"_key":87},"CVE-2016-1714",{"_key":89},"CVE-2016-1922",{"_key":91},"CVE-2016-1981",{"_key":93},"CVE-2016-2198",{"_key":95},"CVE-2016-2270",{"_key":97},"CVE-2016-2271",{"_key":99},"CVE-2016-2391",{"_key":101},"CVE-2016-2392",{"_key":103},"CVE-2016-2538",[],[],[107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151],{"_key":15},{"_key":17},{"_key":19},{"_key":21},{"_key":23},{"_key":25},{"_key":27},{"_key":29},{"_key":31},{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":49},{"_key":51},{"_key":53},{"_key":55},{"_key":57},{"_key":59},{"_key":61},{"_key":63},{"_key":65},{"_key":67},{"_key":69},{"_key":71},{"_key":73},{"_key":75},{"_key":77},{"_key":79},{"_key":81},{"_key":83},{"_key":85},{"_key":87},{"_key":89},{"_key":91},{"_key":93},{"_key":95},{"_key":97},{"_key":99},{"_key":101},{"_key":103},"2016-05-17T12:09:35Z","2026-02-04T04:06:44.769440Z",{"cisa_kev":155,"cisa_ransomware":155,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":9},false,[157,163,168,172,176,180,184,188,192,196,200,204,208,212,216,220,224,228,232,236,240,244,248,252,256,260,264,268,272,276,280,284,288,292,296,300,304,308,312,316,320,324,328,332,336,340,344,348,352,356,361,365,369,373,377,381,385,389,393,397,401,405,409,413,417,421,425,429,433,437,441,445,449,453,457,461,465,469,473,477,481,485,489,493,497,501,505,509,513,517,521,525,529,533],{"url":158,"sources":159,"tags":161},"https://www.suse.com/support/update/announcement/2016/suse-su-20161318-1/",[160],"osv_suse",[162],"Advisory",{"url":164,"sources":165,"tags":166},"https://bugzilla.suse.com/954872",[160],[167],"REPORT",{"url":169,"sources":170,"tags":171},"https://bugzilla.suse.com/956832",[160],[167],{"url":173,"sources":174,"tags":175},"https://bugzilla.suse.com/957988",[160],[167],{"url":177,"sources":178,"tags":179},"https://bugzilla.suse.com/958007",[160],[167],{"url":181,"sources":182,"tags":183},"https://bugzilla.suse.com/958009",[160],[167],{"url":185,"sources":186,"tags":187},"https://bugzilla.suse.com/958493",[160],[167],{"url":189,"sources":190,"tags":191},"https://bugzilla.suse.com/958523",[160],[167],{"url":193,"sources":194,"tags":195},"https://bugzilla.suse.com/958918",[160],[167],{"url":197,"sources":198,"tags":199},"https://bugzilla.suse.com/959006",[160],[167],{"url":201,"sources":202,"tags":203},"https://bugzilla.suse.com/959387",[160],[167],{"url":205,"sources":206,"tags":207},"https://bugzilla.suse.com/959695",[160],[167],{"url":209,"sources":210,"tags":211},"https://bugzilla.suse.com/960707",[160],[167],{"url":213,"sources":214,"tags":215},"https://bugzilla.suse.com/960726",[160],[167],{"url":217,"sources":218,"tags":219},"https://bugzilla.suse.com/960836",[160],[167],{"url":221,"sources":222,"tags":223},"https://bugzilla.suse.com/960861",[160],[167],{"url":225,"sources":226,"tags":227},"https://bugzilla.suse.com/960862",[160],[167],{"url":229,"sources":230,"tags":231},"https://bugzilla.suse.com/961332",[160],[167],{"url":233,"sources":234,"tags":235},"https://bugzilla.suse.com/961358",[160],[167],{"url":237,"sources":238,"tags":239},"https://bugzilla.suse.com/961692",[160],[167],{"url":241,"sources":242,"tags":243},"https://bugzilla.suse.com/962321",[160],[167],{"url":245,"sources":246,"tags":247},"https://bugzilla.suse.com/962335",[160],[167],{"url":249,"sources":250,"tags":251},"https://bugzilla.suse.com/962360",[160],[167],{"url":253,"sources":254,"tags":255},"https://bugzilla.suse.com/962611",[160],[167],{"url":257,"sources":258,"tags":259},"https://bugzilla.suse.com/962627",[160],[167],{"url":261,"sources":262,"tags":263},"https://bugzilla.suse.com/962632",[160],[167],{"url":265,"sources":266,"tags":267},"https://bugzilla.suse.com/962642",[160],[167],{"url":269,"sources":270,"tags":271},"https://bugzilla.suse.com/962758",[160],[167],{"url":273,"sources":274,"tags":275},"https://bugzilla.suse.com/963783",[160],[167],{"url":277,"sources":278,"tags":279},"https://bugzilla.suse.com/963923",[160],[167],{"url":281,"sources":282,"tags":283},"https://bugzilla.suse.com/964415",[160],[167],{"url":285,"sources":286,"tags":287},"https://bugzilla.suse.com/964431",[160],[167],{"url":289,"sources":290,"tags":291},"https://bugzilla.suse.com/964452",[160],[167],{"url":293,"sources":294,"tags":295},"https://bugzilla.suse.com/964644",[160],[167],{"url":297,"sources":298,"tags":299},"https://bugzilla.suse.com/964746",[160],[167],{"url":301,"sources":302,"tags":303},"https://bugzilla.suse.com/964925",[160],[167],{"url":305,"sources":306,"tags":307},"https://bugzilla.suse.com/964929",[160],[167],{"url":309,"sources":310,"tags":311},"https://bugzilla.suse.com/964947",[160],[167],{"url":313,"sources":314,"tags":315},"https://bugzilla.suse.com/964950",[160],[167],{"url":317,"sources":318,"tags":319},"https://bugzilla.suse.com/965112",[160],[167],{"url":321,"sources":322,"tags":323},"https://bugzilla.suse.com/965156",[160],[167],{"url":325,"sources":326,"tags":327},"https://bugzilla.suse.com/965269",[160],[167],{"url":329,"sources":330,"tags":331},"https://bugzilla.suse.com/965315",[160],[167],{"url":333,"sources":334,"tags":335},"https://bugzilla.suse.com/965317",[160],[167],{"url":337,"sources":338,"tags":339},"https://bugzilla.suse.com/967090",[160],[167],{"url":341,"sources":342,"tags":343},"https://bugzilla.suse.com/967101",[160],[167],{"url":345,"sources":346,"tags":347},"https://bugzilla.suse.com/968004",[160],[167],{"url":349,"sources":350,"tags":351},"https://bugzilla.suse.com/969125",[160],[167],{"url":353,"sources":354,"tags":355},"https://bugzilla.suse.com/969126",[160],[167],{"url":357,"sources":358,"tags":359},"https://www.suse.com/security/cve/CVE-2013-4527",[160],[360],"WEB",{"url":362,"sources":363,"tags":364},"https://www.suse.com/security/cve/CVE-2013-4529",[160],[360],{"url":366,"sources":367,"tags":368},"https://www.suse.com/security/cve/CVE-2013-4530",[160],[360],{"url":370,"sources":371,"tags":372},"https://www.suse.com/security/cve/CVE-2013-4533",[160],[360],{"url":374,"sources":375,"tags":376},"https://www.suse.com/security/cve/CVE-2013-4534",[160],[360],{"url":378,"sources":379,"tags":380},"https://www.suse.com/security/cve/CVE-2013-4537",[160],[360],{"url":382,"sources":383,"tags":384},"https://www.suse.com/security/cve/CVE-2013-4538",[160],[360],{"url":386,"sources":387,"tags":388},"https://www.suse.com/security/cve/CVE-2013-4539",[160],[360],{"url":390,"sources":391,"tags":392},"https://www.suse.com/security/cve/CVE-2014-0222",[160],[360],{"url":394,"sources":395,"tags":396},"https://www.suse.com/security/cve/CVE-2014-3640",[160],[360],{"url":398,"sources":399,"tags":400},"https://www.suse.com/security/cve/CVE-2014-3689",[160],[360],{"url":402,"sources":403,"tags":404},"https://www.suse.com/security/cve/CVE-2014-7815",[160],[360],{"url":406,"sources":407,"tags":408},"https://www.suse.com/security/cve/CVE-2014-9718",[160],[360],{"url":410,"sources":411,"tags":412},"https://www.suse.com/security/cve/CVE-2015-1779",[160],[360],{"url":414,"sources":415,"tags":416},"https://www.suse.com/security/cve/CVE-2015-5278",[160],[360],{"url":418,"sources":419,"tags":420},"https://www.suse.com/security/cve/CVE-2015-6855",[160],[360],{"url":422,"sources":423,"tags":424},"https://www.suse.com/security/cve/CVE-2015-7512",[160],[360],{"url":426,"sources":427,"tags":428},"https://www.suse.com/security/cve/CVE-2015-7549",[160],[360],{"url":430,"sources":431,"tags":432},"https://www.suse.com/security/cve/CVE-2015-8345",[160],[360],{"url":434,"sources":435,"tags":436},"https://www.suse.com/security/cve/CVE-2015-8504",[160],[360],{"url":438,"sources":439,"tags":440},"https://www.suse.com/security/cve/CVE-2015-8550",[160],[360],{"url":442,"sources":443,"tags":444},"https://www.suse.com/security/cve/CVE-2015-8554",[160],[360],{"url":446,"sources":447,"tags":448},"https://www.suse.com/security/cve/CVE-2015-8555",[160],[360],{"url":450,"sources":451,"tags":452},"https://www.suse.com/security/cve/CVE-2015-8558",[160],[360],{"url":454,"sources":455,"tags":456},"https://www.suse.com/security/cve/CVE-2015-8567",[160],[360],{"url":458,"sources":459,"tags":460},"https://www.suse.com/security/cve/CVE-2015-8568",[160],[360],{"url":462,"sources":463,"tags":464},"https://www.suse.com/security/cve/CVE-2015-8613",[160],[360],{"url":466,"sources":467,"tags":468},"https://www.suse.com/security/cve/CVE-2015-8619",[160],[360],{"url":470,"sources":471,"tags":472},"https://www.suse.com/security/cve/CVE-2015-8743",[160],[360],{"url":474,"sources":475,"tags":476},"https://www.suse.com/security/cve/CVE-2015-8744",[160],[360],{"url":478,"sources":479,"tags":480},"https://www.suse.com/security/cve/CVE-2015-8745",[160],[360],{"url":482,"sources":483,"tags":484},"https://www.suse.com/security/cve/CVE-2015-8817",[160],[360],{"url":486,"sources":487,"tags":488},"https://www.suse.com/security/cve/CVE-2015-8818",[160],[360],{"url":490,"sources":491,"tags":492},"https://www.suse.com/security/cve/CVE-2016-1568",[160],[360],{"url":494,"sources":495,"tags":496},"https://www.suse.com/security/cve/CVE-2016-1570",[160],[360],{"url":498,"sources":499,"tags":500},"https://www.suse.com/security/cve/CVE-2016-1571",[160],[360],{"url":502,"sources":503,"tags":504},"https://www.suse.com/security/cve/CVE-2016-1714",[160],[360],{"url":506,"sources":507,"tags":508},"https://www.suse.com/security/cve/CVE-2016-1922",[160],[360],{"url":510,"sources":511,"tags":512},"https://www.suse.com/security/cve/CVE-2016-1981",[160],[360],{"url":514,"sources":515,"tags":516},"https://www.suse.com/security/cve/CVE-2016-2198",[160],[360],{"url":518,"sources":519,"tags":520},"https://www.suse.com/security/cve/CVE-2016-2270",[160],[360],{"url":522,"sources":523,"tags":524},"https://www.suse.com/security/cve/CVE-2016-2271",[160],[360],{"url":526,"sources":527,"tags":528},"https://www.suse.com/security/cve/CVE-2016-2391",[160],[360],{"url":530,"sources":531,"tags":532},"https://www.suse.com/security/cve/CVE-2016-2392",[160],[360],{"url":534,"sources":535,"tags":536},"https://www.suse.com/security/cve/CVE-2016-2538",[160],[360],[],[],[],[541,554,558,562],{"ecosystem":542,"name":543,"vendor":544,"product":545,"cpe_part":9,"purl_type":546,"purl_namespace":544,"purl_name":545,"source":9,"versions":547},"SUSE Linux Enterprise","xen","suse","xen&distro=SUSE Linux Enterprise Desktop 12","rpm",[548],{"version":549,"is_range":550,"range_type":551,"version_start":9,"version_start_type":9,"version_end":552,"version_end_type":553,"fixed_in":9},"lt4_4_4_02_22_19_1",true,"ecosystem","4.4.4_02-22.19.1","excluding",{"ecosystem":542,"name":543,"vendor":544,"product":555,"cpe_part":9,"purl_type":546,"purl_namespace":544,"purl_name":555,"source":9,"versions":556},"xen&distro=SUSE Linux Enterprise Server 12",[557],{"version":549,"is_range":550,"range_type":551,"version_start":9,"version_start_type":9,"version_end":552,"version_end_type":553,"fixed_in":9},{"ecosystem":542,"name":543,"vendor":544,"product":559,"cpe_part":9,"purl_type":546,"purl_namespace":544,"purl_name":559,"source":9,"versions":560},"xen&distro=SUSE Linux Enterprise Server for SAP Applications 12",[561],{"version":549,"is_range":550,"range_type":551,"version_start":9,"version_start_type":9,"version_end":552,"version_end_type":553,"fixed_in":9},{"ecosystem":542,"name":543,"vendor":544,"product":563,"cpe_part":9,"purl_type":546,"purl_namespace":544,"purl_name":563,"source":9,"versions":564},"xen&distro=SUSE Linux Enterprise Software Development Kit 12",[565],{"version":549,"is_range":550,"range_type":551,"version_start":9,"version_start_type":9,"version_end":552,"version_end_type":553,"fixed_in":9}]