[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-SUSE-SU-2016:1745-1":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T14:53:31.930Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":84,"duplicates":85,"related":86,"reserved_at":9,"published_at":122,"modified_at":123,"state":9,"summary":124,"references_raw":126,"kevs":435,"epss":9,"epss_history":436,"metrics":437,"affected":438},"SUSE-SU-2016:1745-1","Security update for xen\n\nxen was updated to fix 36 security issues.\n\nThese security issues were fixed:\n- CVE-2013-4527: Buffer overflow in hw/timer/hpet.c might have allowed remote attackers to execute arbitrary code via vectors related to the number of timers (bnc#864673).\n- CVE-2013-4529: Buffer overflow in hw/pci/pcie_aer.c allowed remote attackers to cause a denial of service and possibly execute arbitrary code via a large log_num value in a savevm image (bnc#864678).\n- CVE-2013-4530: Buffer overflow in hw/ssi/pl022.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via crafted tx_fifo_head and rx_fifo_head values in a savevm image (bnc#864682).\n- CVE-2013-4533: Buffer overflow in the pxa2xx_ssp_load function in hw/arm/pxa2xx.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted s->rx_level value in a savevm image (bsc#864655).\n- CVE-2013-4534: Buffer overflow in hw/intc/openpic.c allowed remote attackers to cause a denial of service or possibly execute arbitrary code via vectors related to IRQDest elements (bsc#864811).\n- CVE-2013-4537: The ssi_sd_transfer function in hw/sd/ssi-sd.c allowed remote attackers to execute arbitrary code via a crafted arglen value in a savevm image (bsc#864391).\n- CVE-2013-4538: Multiple buffer overflows in the ssd0323_load function in hw/display/ssd0323.c allowed remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted (1) cmd_len, (2) row, or (3) col values; (4) row_start and row_end values; or (5) col_star and col_end values in a savevm image (bsc#864769).\n- CVE-2013-4539: Multiple buffer overflows in the tsc210x_load function in hw/input/tsc210x.c might have allowed remote attackers to execute arbitrary code via a crafted (1) precision, (2) nextprecision, (3) function, or (4) nextfunction value in a savevm image (bsc#864805).\n- CVE-2014-0222: Integer overflow in the qcow_open function in block/qcow.c allowed remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image (bsc#877642).\n- CVE-2014-3640: The sosendto function in slirp/udp.c allowed local users to cause a denial of service (NULL pointer dereference) by sending a udp packet with a value of 0 in the source port and address, which triggers access of an uninitialized socket (bsc#897654).\n- CVE-2014-3689: The vmware-vga driver (hw/display/vmware_vga.c) allowed local guest users to write to qemu memory locations and gain privileges via unspecified parameters related to rectangle handling (bsc#901508).\n- CVE-2014-7815: The set_pixel_format function in ui/vnc.c allowed remote attackers to cause a denial of service (crash) via a small bytes_per_pixel value (bsc#902737).\n- CVE-2014-9718: The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality had multiple interpretations of a function's return value, which allowed guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and system crash) via a PRDT with zero complete sectors, related to the bmdma_prepare_buf and ahci_dma_prepare_buf functions (bsc#928393).\n- CVE-2015-5278: Infinite loop in ne2000_receive() function (bsc#945989).\n- CVE-2015-6855: hw/ide/core.c did not properly restrict the commands accepted by an ATAPI device, which allowed guest users to cause a denial of service or possibly have unspecified other impact via certain IDE commands, as demonstrated by a WIN_READ_NATIVE_MAX command to an empty drive, which triggers a divide-by-zero error and instance crash (bsc#945404).\n- CVE-2015-7512: Buffer overflow in the pcnet_receive function in hw/net/pcnet.c, when a guest NIC has a larger MTU, allowed remote attackers to cause a denial of service (guest OS crash) or execute arbitrary code via a large packet (bsc#957162).\n- CVE-2015-8345: eepro100: infinite loop in processing command block list (bsc#956829).\n- CVE-2015-8504: VNC: floating point exception (bsc#958491).\n- CVE-2015-8550: Paravirtualized drivers were incautious about shared memory contents (XSA-155) (bsc#957988).\n- CVE-2015-8554: qemu-dm buffer overrun in MSI-X handling (XSA-164) (bsc#958007).\n- CVE-2015-8555: Information leak in legacy x86 FPU/XMM initialization (XSA-165) (bsc#958009).\n- CVE-2015-8558: Infinite loop in ehci_advance_state resulted in DoS (bsc#959005).\n- CVE-2015-8743: ne2000: OOB memory access in ioport r/w functions (bsc#960725).\n- CVE-2015-8745: Reading IMR registers lead to a crash via assert(2) call (bsc#960707).\n- CVE-2016-1568: AHCI use-after-free vulnerability in aio port commands (bsc#961332).\n- CVE-2016-1570: The PV superpage functionality in arch/x86/mm.c allowed local PV guests to obtain sensitive information, cause a denial of service, gain privileges, or have unspecified other impact via a crafted page identifier (MFN) to the (1) MMUEXT_MARK_SUPER or (2) MMUEXT_UNMARK_SUPER sub-op in the HYPERVISOR_mmuext_op hypercall or (3) unknown vectors related to page table updates (bsc#960861).\n- CVE-2016-1571: VMX: intercept issue with INVLPG on non-canonical address (XSA-168) (bsc#960862).\n- CVE-2016-1714: nvram: OOB r/w access in processing firmware configurations (bsc#961691).\n- CVE-2016-1981: e1000 infinite loop in start_xmit and e1000_receive_iov routines (bsc#963782).\n- CVE-2016-2270: Xen allowed local guest administrators to cause a denial of service (host reboot) via vectors related to multiple mappings of MMIO pages with different cachability settings (bsc#965315).\n- CVE-2016-2271: VMX when using an Intel or Cyrix CPU, allowed local HVM guest users to cause a denial of service (guest crash) via vectors related to a non-canonical RIP (bsc#965317).\n- CVE-2016-2391: usb: multiple eof_timers in ohci module lead to NULL pointer dereference (bsc#967013).\n- CVE-2016-2392: NULL pointer dereference in remote NDIS control message handling (bsc#967012).\n- CVE-2016-2538: Integer overflow in remote NDIS control message handling (bsc#967969).\n- CVE-2016-2841: ne2000: Infinite loop in ne2000_receive (bsc#969350).\n- XSA-166: ioreq handling possibly susceptible to multiple read issue (bsc#958523).\n\nThese non-security issues were fixed:\n- bsc#954872: script block-dmmd not working as expected \n- bsc#959695: Missing docs for xen\n- bsc#967630: Discrepancy in reported memory size with correction XSA-153 for xend\n- bsc#959928: When DomU is in state running xm domstate returned nothing\n",null,[],[],[],[14,16,18,20,22,24,26,28,30,32,34,36,38,40,42,44,46,48,50,52,54,56,58,60,62,64,66,68,70,72,74,76,78,80,82],{"_key":15},"CVE-2013-4527",{"_key":17},"CVE-2013-4529",{"_key":19},"CVE-2013-4530",{"_key":21},"CVE-2013-4533",{"_key":23},"CVE-2013-4534",{"_key":25},"CVE-2013-4537",{"_key":27},"CVE-2013-4538",{"_key":29},"CVE-2013-4539",{"_key":31},"CVE-2014-0222",{"_key":33},"CVE-2014-3640",{"_key":35},"CVE-2014-3689",{"_key":37},"CVE-2014-7815",{"_key":39},"CVE-2014-9718",{"_key":41},"CVE-2015-5278",{"_key":43},"CVE-2015-6855",{"_key":45},"CVE-2015-7512",{"_key":47},"CVE-2015-8345",{"_key":49},"CVE-2015-8504",{"_key":51},"CVE-2015-8550",{"_key":53},"CVE-2015-8554",{"_key":55},"CVE-2015-8555",{"_key":57},"CVE-2015-8558",{"_key":59},"CVE-2015-8743",{"_key":61},"CVE-2015-8745",{"_key":63},"CVE-2016-1568",{"_key":65},"CVE-2016-1570",{"_key":67},"CVE-2016-1571",{"_key":69},"CVE-2016-1714",{"_key":71},"CVE-2016-1981",{"_key":73},"CVE-2016-2270",{"_key":75},"CVE-2016-2271",{"_key":77},"CVE-2016-2391",{"_key":79},"CVE-2016-2392",{"_key":81},"CVE-2016-2538",{"_key":83},"CVE-2016-2841",[],[],[87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121],{"_key":15},{"_key":17},{"_key":19},{"_key":21},{"_key":23},{"_key":25},{"_key":27},{"_key":29},{"_key":31},{"_key":33},{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":49},{"_key":51},{"_key":53},{"_key":55},{"_key":57},{"_key":59},{"_key":61},{"_key":63},{"_key":65},{"_key":67},{"_key":69},{"_key":71},{"_key":73},{"_key":75},{"_key":77},{"_key":79},{"_key":81},{"_key":83},"2016-07-06T05:46:30Z","2025-05-02T04:03:59.114846Z",{"cisa_kev":125,"cisa_ransomware":125,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":9},false,[127,133,138,142,146,150,154,158,162,166,170,174,178,182,186,190,194,198,202,206,210,214,218,222,226,230,234,238,242,246,250,254,258,262,266,270,274,278,282,286,290,294,299,303,307,311,315,319,323,327,331,335,339,343,347,351,355,359,363,367,371,375,379,383,387,391,395,399,403,407,411,415,419,423,427,431],{"url":128,"sources":129,"tags":131},"https://www.suse.com/support/update/announcement/2016/suse-su-20161745-1/",[130],"osv_suse",[132],"Advisory",{"url":134,"sources":135,"tags":136},"https://bugzilla.suse.com/864391",[130],[137],"REPORT",{"url":139,"sources":140,"tags":141},"https://bugzilla.suse.com/864655",[130],[137],{"url":143,"sources":144,"tags":145},"https://bugzilla.suse.com/864673",[130],[137],{"url":147,"sources":148,"tags":149},"https://bugzilla.suse.com/864678",[130],[137],{"url":151,"sources":152,"tags":153},"https://bugzilla.suse.com/864682",[130],[137],{"url":155,"sources":156,"tags":157},"https://bugzilla.suse.com/864769",[130],[137],{"url":159,"sources":160,"tags":161},"https://bugzilla.suse.com/864805",[130],[137],{"url":163,"sources":164,"tags":165},"https://bugzilla.suse.com/864811",[130],[137],{"url":167,"sources":168,"tags":169},"https://bugzilla.suse.com/877642",[130],[137],{"url":171,"sources":172,"tags":173},"https://bugzilla.suse.com/897654",[130],[137],{"url":175,"sources":176,"tags":177},"https://bugzilla.suse.com/901508",[130],[137],{"url":179,"sources":180,"tags":181},"https://bugzilla.suse.com/902737",[130],[137],{"url":183,"sources":184,"tags":185},"https://bugzilla.suse.com/928393",[130],[137],{"url":187,"sources":188,"tags":189},"https://bugzilla.suse.com/945404",[130],[137],{"url":191,"sources":192,"tags":193},"https://bugzilla.suse.com/945989",[130],[137],{"url":195,"sources":196,"tags":197},"https://bugzilla.suse.com/954872",[130],[137],{"url":199,"sources":200,"tags":201},"https://bugzilla.suse.com/956829",[130],[137],{"url":203,"sources":204,"tags":205},"https://bugzilla.suse.com/957162",[130],[137],{"url":207,"sources":208,"tags":209},"https://bugzilla.suse.com/957988",[130],[137],{"url":211,"sources":212,"tags":213},"https://bugzilla.suse.com/958007",[130],[137],{"url":215,"sources":216,"tags":217},"https://bugzilla.suse.com/958009",[130],[137],{"url":219,"sources":220,"tags":221},"https://bugzilla.suse.com/958491",[130],[137],{"url":223,"sources":224,"tags":225},"https://bugzilla.suse.com/958523",[130],[137],{"url":227,"sources":228,"tags":229},"https://bugzilla.suse.com/959005",[130],[137],{"url":231,"sources":232,"tags":233},"https://bugzilla.suse.com/959695",[130],[137],{"url":235,"sources":236,"tags":237},"https://bugzilla.suse.com/959928",[130],[137],{"url":239,"sources":240,"tags":241},"https://bugzilla.suse.com/960707",[130],[137],{"url":243,"sources":244,"tags":245},"https://bugzilla.suse.com/960725",[130],[137],{"url":247,"sources":248,"tags":249},"https://bugzilla.suse.com/960861",[130],[137],{"url":251,"sources":252,"tags":253},"https://bugzilla.suse.com/960862",[130],[137],{"url":255,"sources":256,"tags":257},"https://bugzilla.suse.com/961332",[130],[137],{"url":259,"sources":260,"tags":261},"https://bugzilla.suse.com/961691",[130],[137],{"url":263,"sources":264,"tags":265},"https://bugzilla.suse.com/963782",[130],[137],{"url":267,"sources":268,"tags":269},"https://bugzilla.suse.com/965315",[130],[137],{"url":271,"sources":272,"tags":273},"https://bugzilla.suse.com/965317",[130],[137],{"url":275,"sources":276,"tags":277},"https://bugzilla.suse.com/967012",[130],[137],{"url":279,"sources":280,"tags":281},"https://bugzilla.suse.com/967013",[130],[137],{"url":283,"sources":284,"tags":285},"https://bugzilla.suse.com/967630",[130],[137],{"url":287,"sources":288,"tags":289},"https://bugzilla.suse.com/967969",[130],[137],{"url":291,"sources":292,"tags":293},"https://bugzilla.suse.com/969350",[130],[137],{"url":295,"sources":296,"tags":297},"https://www.suse.com/security/cve/CVE-2013-4527",[130],[298],"WEB",{"url":300,"sources":301,"tags":302},"https://www.suse.com/security/cve/CVE-2013-4529",[130],[298],{"url":304,"sources":305,"tags":306},"https://www.suse.com/security/cve/CVE-2013-4530",[130],[298],{"url":308,"sources":309,"tags":310},"https://www.suse.com/security/cve/CVE-2013-4533",[130],[298],{"url":312,"sources":313,"tags":314},"https://www.suse.com/security/cve/CVE-2013-4534",[130],[298],{"url":316,"sources":317,"tags":318},"https://www.suse.com/security/cve/CVE-2013-4537",[130],[298],{"url":320,"sources":321,"tags":322},"https://www.suse.com/security/cve/CVE-2013-4538",[130],[298],{"url":324,"sources":325,"tags":326},"https://www.suse.com/security/cve/CVE-2013-4539",[130],[298],{"url":328,"sources":329,"tags":330},"https://www.suse.com/security/cve/CVE-2014-0222",[130],[298],{"url":332,"sources":333,"tags":334},"https://www.suse.com/security/cve/CVE-2014-3640",[130],[298],{"url":336,"sources":337,"tags":338},"https://www.suse.com/security/cve/CVE-2014-3689",[130],[298],{"url":340,"sources":341,"tags":342},"https://www.suse.com/security/cve/CVE-2014-7815",[130],[298],{"url":344,"sources":345,"tags":346},"https://www.suse.com/security/cve/CVE-2014-9718",[130],[298],{"url":348,"sources":349,"tags":350},"https://www.suse.com/security/cve/CVE-2015-5278",[130],[298],{"url":352,"sources":353,"tags":354},"https://www.suse.com/security/cve/CVE-2015-6855",[130],[298],{"url":356,"sources":357,"tags":358},"https://www.suse.com/security/cve/CVE-2015-7512",[130],[298],{"url":360,"sources":361,"tags":362},"https://www.suse.com/security/cve/CVE-2015-8345",[130],[298],{"url":364,"sources":365,"tags":366},"https://www.suse.com/security/cve/CVE-2015-8504",[130],[298],{"url":368,"sources":369,"tags":370},"https://www.suse.com/security/cve/CVE-2015-8550",[130],[298],{"url":372,"sources":373,"tags":374},"https://www.suse.com/security/cve/CVE-2015-8554",[130],[298],{"url":376,"sources":377,"tags":378},"https://www.suse.com/security/cve/CVE-2015-8555",[130],[298],{"url":380,"sources":381,"tags":382},"https://www.suse.com/security/cve/CVE-2015-8558",[130],[298],{"url":384,"sources":385,"tags":386},"https://www.suse.com/security/cve/CVE-2015-8743",[130],[298],{"url":388,"sources":389,"tags":390},"https://www.suse.com/security/cve/CVE-2015-8745",[130],[298],{"url":392,"sources":393,"tags":394},"https://www.suse.com/security/cve/CVE-2016-1568",[130],[298],{"url":396,"sources":397,"tags":398},"https://www.suse.com/security/cve/CVE-2016-1570",[130],[298],{"url":400,"sources":401,"tags":402},"https://www.suse.com/security/cve/CVE-2016-1571",[130],[298],{"url":404,"sources":405,"tags":406},"https://www.suse.com/security/cve/CVE-2016-1714",[130],[298],{"url":408,"sources":409,"tags":410},"https://www.suse.com/security/cve/CVE-2016-1981",[130],[298],{"url":412,"sources":413,"tags":414},"https://www.suse.com/security/cve/CVE-2016-2270",[130],[298],{"url":416,"sources":417,"tags":418},"https://www.suse.com/security/cve/CVE-2016-2271",[130],[298],{"url":420,"sources":421,"tags":422},"https://www.suse.com/security/cve/CVE-2016-2391",[130],[298],{"url":424,"sources":425,"tags":426},"https://www.suse.com/security/cve/CVE-2016-2392",[130],[298],{"url":428,"sources":429,"tags":430},"https://www.suse.com/security/cve/CVE-2016-2538",[130],[298],{"url":432,"sources":433,"tags":434},"https://www.suse.com/security/cve/CVE-2016-2841",[130],[298],[],[],[],[439],{"ecosystem":440,"name":441,"vendor":442,"product":443,"cpe_part":9,"purl_type":444,"purl_namespace":442,"purl_name":443,"source":9,"versions":445},"SUSE Linux Enterprise","xen","suse","xen&distro=SUSE Linux Enterprise Server 11 SP3-LTSS","rpm",[446],{"version":447,"is_range":448,"range_type":449,"version_start":9,"version_start_type":9,"version_end":450,"version_end_type":451,"fixed_in":9},"lt4_2_5_20_24_9",true,"ecosystem","4.2.5_20-24.9","excluding"]