SUSE-SU-2018:1456-1

    Dashboard / Vulnerabilities / SUSE-SU-2018:1456-1

    SUSE-SU-2018:1456-1

    Published: 29 May 2018Last Modified: 4 Feb 2026

    Summary: Security update for xen

    Details: This update for xen fixes the following issues: Security issues fixed: - CVE-2018-3639: Spectre V4 – Speculative Store Bypass aka 'Memory Disambiguation' (bsc#1092631) This feature can be controlled by the 'ssbd=on/off' commandline flag for the XEN hypervisor. - CVE-2018-10982: x86 vHPET interrupt injection errors (XSA-261 bsc#1090822) - CVE-2018-10981: qemu may drive Xen into unbounded loop (XSA-262 bsc#1090823) Other bugfixes: - Upstream patches from Jan (bsc#1027519) - additional fixes related to Page Table Isolation (XPTI). (bsc#1074562 XSA-254) - qemu-system-i386 cannot handle more than 4 HW NICs (bsc#1090296)

    References: https://www.suse.com/support/update/announcement/2018/suse-su-20181456-1/, https://bugzilla.suse.com/1027519, https://bugzilla.suse.com/1074562, https://bugzilla.suse.com/1090296, https://bugzilla.suse.com/1090822, https://bugzilla.suse.com/1090823, https://bugzilla.suse.com/1092631, https://www.suse.com/security/cve/CVE-2018-10981, https://www.suse.com/security/cve/CVE-2018-10982, https://www.suse.com/security/cve/CVE-2018-3639

    Affected packages

    Package

    Name: xen

    Purl: pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -4.9.2_06-3.32.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High