- Detalji
-
U radu programskog paketa xen otkrivena je ranjivost koja udaljenom napadaču omogućuje pokretanje napada uskraćivanja usluga.
| Paket: |
xen 3.x |
| Operacijski sustavi: |
SUSE Linux Enterprise Desktop 10, SUSE Linux Enterprise Server (SLES) 10 |
| Kritičnost: |
5.5 |
| Problem: |
pogreška u programskoj komponenti |
| Iskorištavanje: |
udaljeno |
| Posljedica: |
uskraćivanje usluga (DoS) |
| Rješenje: |
programska zakrpa proizvođača |
| CVE: |
CVE-2011-2901, CVE-2011-3131 |
| Izvorni ID preporuke: |
SUSE-SU-2011:0983-1 |
| Izvor: |
SUSE |
| |
| Problem: |
Problem je posljedica pogreške u programskoj komponenti XEN hypervisor.
|
| Posljedica: |
Uspješnim iskorištavanjem uočene ranjivosti udaljeni napadač može ostvariti napad uskraćivanja usluga.
|
| Rješenje: |
Svim korisnicima savjetuje se nadogradnja na najnoviju inačicu.
|
Izvorni tekst preporuke
SUSE Security Update: Security update for Xen
______________________________________________________________________________
Announcement ID: SUSE-SU-2011:0983-1
Rating: important
References: #712038
Cross-References: CVE-2011-2901 CVE-2011-3131
Affected Products:
SUSE Linux Enterprise Server 10 SP4
SUSE Linux Enterprise Desktop 10 SP4
SLE SDK 10 SP4
______________________________________________________________________________
An update that fixes two vulnerabilities is now available.
Description:
This update fixes a denial of service (Host Crash) in the
XEN hypervisor. (CVE-2011-2901)
Security Issue reference:
* CVE-2011-2901
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2901
>
* CVE-2011-3131
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3131
>
Indications:
Please install this update.
Package List:
- SUSE Linux Enterprise Server 10 SP4 (i586 x86_64):
xen-3.2.3_17040_37-0.9.1
xen-devel-3.2.3_17040_37-0.9.1
xen-doc-html-3.2.3_17040_37-0.9.1
xen-doc-pdf-3.2.3_17040_37-0.9.1
xen-doc-ps-3.2.3_17040_37-0.9.1
xen-kmp-debug-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1
xen-kmp-default-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1
xen-kmp-kdump-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1
xen-kmp-smp-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1
xen-libs-3.2.3_17040_37-0.9.1
xen-tools-3.2.3_17040_37-0.9.1
xen-tools-domU-3.2.3_17040_37-0.9.1
xen-tools-ioemu-3.2.3_17040_37-0.9.1
- SUSE Linux Enterprise Server 10 SP4 (x86_64):
xen-libs-32bit-3.2.3_17040_37-0.9.1
- SUSE Linux Enterprise Server 10 SP4 (i586):
xen-kmp-bigsmp-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1
xen-kmp-kdumppae-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1
xen-kmp-vmi-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1
xen-kmp-vmipae-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1
- SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64):
xen-3.2.3_17040_37-0.9.1
xen-devel-3.2.3_17040_37-0.9.1
xen-doc-html-3.2.3_17040_37-0.9.1
xen-doc-pdf-3.2.3_17040_37-0.9.1
xen-doc-ps-3.2.3_17040_37-0.9.1
xen-kmp-default-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1
xen-kmp-smp-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1
xen-libs-3.2.3_17040_37-0.9.1
xen-tools-3.2.3_17040_37-0.9.1
xen-tools-domU-3.2.3_17040_37-0.9.1
xen-tools-ioemu-3.2.3_17040_37-0.9.1
- SUSE Linux Enterprise Desktop 10 SP4 (x86_64):
xen-libs-32bit-3.2.3_17040_37-0.9.1
- SUSE Linux Enterprise Desktop 10 SP4 (i586):
xen-kmp-bigsmp-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1
- SLE SDK 10 SP4 (i586 x86_64):
xen-3.2.3_17040_37-0.9.1
xen-devel-3.2.3_17040_37-0.9.1
xen-kmp-debug-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1
xen-kmp-kdump-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1
xen-libs-3.2.3_17040_37-0.9.1
xen-tools-3.2.3_17040_37-0.9.1
xen-tools-ioemu-3.2.3_17040_37-0.9.1
- SLE SDK 10 SP4 (x86_64):
xen-libs-32bit-3.2.3_17040_37-0.9.1
References:
http://support.novell.com/security/cve/CVE-2011-2901.html
http://support.novell.com/security/cve/CVE-2011-3131.html
https://bugzilla.novell.com/712038
http://download.novell.com/patch/finder/?keywords=1a3d8df4480b5a9e000bc582606a1bae
--
To unsubscribe, e-mail: Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
For additional commands, e-mail: Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
Posljednje sigurnosne preporuke