openSUSE Security Update : the Linux Kernel (openSUSE-2016-518)

critical Nessus Plugin ID 90783

Language:

Synopsis

The remote openSUSE host is missing a security update.

Description

The openSUSE 13.1 kernel was updated to 3.12.57 to receive various security and bugfixes.

The following security bugs were fixed :

- CVE-2015-8785: The fuse_fill_write_pages function in fs/fuse/file.c in the Linux kernel allowed local users to cause a denial of service (infinite loop) via a writev system call that triggers a zero length for the first segment of an iov. (bsc#963765)

- CVE-2015-8551: The PCI backend driver in Xen, when running on an x86 system and using Linux as the driver domain, allowed local guest administrators to hit BUG conditions and cause a denial of service (NULL pointer dereference and host OS crash) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and a crafted sequence of XEN_PCI_OP_* operations, aka 'Linux pciback missing sanity checks (bnc#957990).

- CVE-2015-8552: The PCI backend driver in Xen, when running on an x86 system and using Linux as the driver domain, allowed local guest administrators to generate a continuous stream of WARN messages and cause a denial of service (disk consumption) by leveraging a system with access to a passed-through MSI or MSI-X capable physical PCI device and XEN_PCI_OP_enable_msi operations, aka 'Linux pciback missing sanity checks (bnc#957990).

- CVE-2015-8812: A flaw was found in the CXGB3 kernel driver when the network was considered congested. The kernel would incorrectly misinterpret the congestion as an error condition and incorrectly free/clean up the skb. When the device would then send the skb's queued, these structures would be referenced and may panic the system or allow an attacker to escalate privileges in a use-after-free scenario.(bsc#966437).

- CVE-2015-8816: A malicious USB device could cause kernel crashes in the in hub_activate() function (bnc#968010).

- CVE-2016-0723: Race condition in the tty_ioctl function in drivers/tty/tty_io.c in the Linux kernel allowed local users to obtain sensitive information from kernel memory or cause a denial of service (use-after-free and system crash) by making a TIOCGETD ioctl call during processing of a TIOCSETD ioctl call. (bsc#961500)

- CVE-2016-2184: A malicious USB device could cause kernel crashes in the alsa usb-audio device driver (bsc#971125).

- CVE-2016-2384: A double free on the ALSA umidi object was fixed. (bsc#966693).

- CVE-2016-2782: A malicious USB device could cause kernel crashes in the visor device driver (bnc#968670).

- CVE-2016-3139: A malicious USB device could cause kernel crashes in the wacom device driver (bnc#970909).

- CVE-2016-3156: A quadratic algorithm could lead to long kernel ipv4 hangs when removing a device with a large number of addresses. (bsc#971360).

The following non-security bugs were fixed :

- acl: Fix problem with setting ACL on directories (bsc#867251).

- acpi / processor: Introduce apic_id in struct processor to save parsed APIC id (bsc#959463).

- alsa: rawmidi: Make snd_rawmidi_transmit() race-free (bsc#968018).

- alsa: seq: Fix leak of pool buffer at concurrent writes (bsc#968018).

- arm: cubox: Add separate cubox configuration.

- arm: xen: implement multicall hypercall support.

- block: xen-blkfront: Fix possible NULL ptr dereference (bsc#957986 fate#320625).

- btrfs-8394-qgroup-Account-data-space-in-more-proper-timi n.patch: (bsc#963193).

- btrfs: Add handler for invalidate page (bsc#963193).

- btrfs: check prepare_uptodate_page() error code earlier (bnc#966910).

- btrfs: delayed_ref: Add new function to record reserved space into delayed ref (bsc#963193).

- btrfs: delayed_ref: release and free qgroup reserved at proper timing (bsc#963193).

- btrfs: extent_io: Introduce needed structure for recoding set/clear bits (bsc#963193).

- btrfs: extent_io: Introduce new function clear_record_extent_bits() (bsc#963193).

- btrfs: extent_io: Introduce new function set_record_extent_bits (bsc#963193).

- btrfs: extent-tree: Add new version of btrfs_check_data_free_space and btrfs_free_reserved_data_space (bsc#963193).

- btrfs: extent-tree: Add new version of btrfs_delalloc_reserve/release_space (bsc#963193).

- btrfs: extent-tree: Switch to new check_data_free_space and free_reserved_data_space (bsc#963193).

- btrfs: extent-tree: Switch to new delalloc space reserve and release (bsc#963193).

- btrfs: fallocate: Add support to accurate qgroup reserve (bsc#963193).

- btrfs: fix invalid page accesses in extent_same (dedup) ioctl (bnc#968230).

- btrfs: fix page reading in extent_same ioctl leading to csum errors (bnc#968230).

- btrfs: fix warning in backref walking (bnc#966278).

- btrfs: qgroup: Add handler for NOCOW and inline (bsc#963193).

- btrfs: qgroup: Add new trace point for qgroup data reserve (bsc#963193).

- btrfs: qgroup: Avoid calling btrfs_free_reserved_data_space in clear_bit_hook (bsc#963193).

- btrfs: qgroup: Check if qgroup reserved space leaked (bsc#963193).

- btrfs: qgroup: Cleanup old inaccurate facilities (bsc#963193).

- btrfs: qgroup: Fix a race in delayed_ref which leads to abort trans (bsc#963193).

- btrfs: qgroup: Fix a rebase bug which will cause qgroup double free (bsc#963193).

- btrfs: qgroup: Fix dead judgement on qgroup_rescan_leaf() return value (bsc#969439).

- btrfs: qgroup: Introduce btrfs_qgroup_reserve_data function (bsc#963193).

- btrfs: qgroup: Introduce functions to release/free qgroup reserve data space (bsc#963193).

- btrfs: qgroup: Introduce new functions to reserve/free metadata (bsc#963193).

- btrfs: qgroup: Use new metadata reservation (bsc#963193).

- cpu: Provide smpboot_thread_init() on !CONFIG_SMP kernels as well.

- dcache: use IS_ROOT to decide where dentry is hashed (bsc#949752).

- dmapi: fix dm_open_by_handle_rvp taking an extra ref to mnt (bsc#967292).

- drivers/base/memory.c: fix kernel warning during memory hotplug on ppc64 (bsc#963827).

- drivers:hv: Allow for MMIO claims that span ACPI _CRS records (bnc#965924).

- drivers:hv: Define the channel type for Hyper-V PCI Express pass-through (bnc#965924).

- drivers:hv: Export a function that maps Linux CPU num onto Hyper-V proc num (bnc#965924).

- drivers:hv: Export the API to invoke a hypercall on Hyper-V (bnc#965924).

- drivers: hv: kvp: fix IP Failover.

- drivers:pci:hv: New paravirtual PCI front-end for Hyper-V VMs (bnc#965924).

- drivers: xen-blkfront: only talk_to_blkback() when in XenbusStateInitialising (bsc#957986 fate#320625).

- driver: xen-blkfront: move talk_to_blkback to a more suitable place (bsc#957986 fate#320625).

- drm/i915: do not warn if backlight unexpectedly enabled (boo#972068).

- drm/i915: set backlight duty cycle after backlight enable for gen4 (boo#972780).

- e1000e: Avoid divide by zero error (bsc#968643).

- e1000e: fix division by zero on jumbo MTUs (bsc#968643).

- e1000e: Fix tight loop implementation of systime read algorithm (bsc#968643).

- fix: print ext4 mountopt data_err=abort correctly (bsc#969735).

- fs/proc_namespace.c: simplify testing nsp and nsp->mnt_ns (bug#963960).

- futex: Drop refcount if requeue_pi() acquired the rtmutex (bug#960174).

- hv: Lock access to hyperv_mmio resource tree (bnc#965924).

- hv: Make a function to free mmio regions through vmbus (bnc#965924).

- hv: Reverse order of resources in hyperv_mmio (bnc#965924).

- hv: Track allocations of children of hv_vmbus in private resource tree (bnc#965924).

- hv: Use new vmbus_mmio_free() from client drivers (bnc#965924).

- hwmon: (coretemp) Increase maximum core to 128 (bsc#970160)

- ibmvnic: Fix ibmvnic_capability struct (fate#320253).

- intel_pstate: Use del_timer_sync in intel_pstate_cpu_stop (bsc#967650).

- ipv6: mld: fix add_grhead skb_over_panic for devs with large MTUs (bsc#956852).

- kabi: Preserve checksum of kvm_x86_ops (bsc#969112).

- kABI: protect enum enclosure_component_type.

- kabi: protect struct acpi_processor signature (bsc#959463).

- kABI: protect struct af_alg_type.

- kABI: protect struct crypto_ahash.

- kABI: protect struct dm_exception_store_type.

- kABI: protect struct fib_nh_exception.

- kABI: protect struct module.

- kABI: protect struct rq.

- kABI: protect struct sched_class.

- kABI: protect struct scm_creds.

- kABI: protect struct user_struct.

- kabi/severities :

- kabi/severities: Fail on changes in kvm_x86_ops, needed by lttng-modules

- kgr: fix reversion of a patch already reverted by a replace_all patch (fate#313296).

- kvm: SVM: add rdmsr support for AMD event registers (bsc#968448).

- kvm: x86: Check dest_map->vector to match eoi signals for rtc (bsc#966471).

- kvm: x86: Convert ioapic->rtc_status.dest_map to a struct (bsc#966471).

- kvm: x86: store IOAPIC-handled vectors in each VCPU (bsc#966471).

- kvm: x86: Track irq vectors in ioapic->rtc_status.dest_map (bsc#966471).

- libceph: fix scatterlist last_piece calculation (bsc#963746).

- lpfc: Fix kmalloc overflow in LPFC driver at large core count (bsc#969690).

- memcg: do not hang on OOM when killed by userspace OOM access to memory reserves (bnc#969571).

- mld, igmp: Fix reserved tailroom calculation (bsc#956852).

- mmc: Exynos: Add module alias for dw mmc.

- mvneta: fix per-cpu stats initialization.

- namespaces: Re-introduce task_nsproxy() helper (bug#963960).

- namespaces: Use task_lock and not rcu to protect nsproxy (bug#963960).

- net: core: Correct an over-stringent device loop detection (bsc#945219).

- net: irda: Fix use-after-free in irtty_open() (bnc#967903).

- nfs4: treat lock owners as opaque values (bnc#968141).

- nfs: Background flush should not be low priority (bsc#955308).

- nfsd: fix nfsd_setattr return code for HSM (bsc#969992).

- nfs: do not use STABLE writes during writeback (bnc#816099).

- nfs: Fix handling of re-write-before-commit for mmapped NFS pages (bsc#964201).

- nvme: default to 4k device page size (bsc#967047).

- nvme: special case AEN requests (bsc#965087).

- omap3isp: fix miscompile.

- omap: Fix missing cm3xxx.h include.

- omap: Fix missing usb.h include.

- pci: Add global pci_lock_rescan_remove() (bnc#965924).

- pci: allow access to VPD attributes with size 0 (bsc#959146).

- pciback: Check PF instead of VF for PCI_COMMAND_MEMORY.

- pciback: Save the number of MSI-X entries to be copied later.

- pci: Blacklist vpd access for buggy devices (bsc#959146).

- pci: Determine actual VPD size on first access (bsc#959146).

- pci: Export symbols required for loadable host driver modules (bnc#965924).

- pci: pciehp: Disable link notification across slot reset (bsc#967651).

- pci: pciehp: Do not check adapter or latch status while disabling (bsc#967651).

- pci: pciehp: Do not disable the link permanently during removal (bsc#967651).

- pci: pciehp: Ensure very fast hotplug events are also processed (bsc#967651).

- pci: Update VPD definitions (bsc#959146).

- perf, nmi: Fix unknown NMI warning (bsc#968512).

- power: Add _GLOBAL_TOC for 32bit.

- proc: Fix ptrace-based permission checks for accessing task maps.

- qla2xxx: Remove unavailable firmware files (bsc#943645).

- rbd: do not log miscompare as an error (bsc#970062).

- Refresh patches.drivers/0005-aacraid-MSI-x-support.patch.
(boo#970249)

- resources: Set type in __request_region() (bnc#965924).

- Revert 'ipv6: tcp: add rcu locking in tcp_v6_send_synack()' (bnc#961257).

- rpm/kernel-binary.spec.in: Sync the main and -base package dependencies (bsc#965830#c51).

- rpm/kernel-module-subpackage: Fix obsoleting dropped flavors (bsc#968253)

- sched: unbreak non-SMP build.

- scsi_dh_alua: Do not block request queue if workqueue is active (bsc#960458).

- scsi: fix soft lockup in scsi_remove_target() on module removal (bsc#965199).

- scsi: proper state checking and module refcount handling in scsi_device_get (boo#966831).

- series.conf: add section comments

- supported.conf: Add e1000e (emulated by VMware) to -base (bsc#968074)

- supported.conf: Add Hyper-V modules to -base (bsc#965830)

- supported.conf: Add isofs to -base (bsc#969655).

- supported.conf: Add more qemu device driver (bsc#968234)

- supported.conf: Add mptspi and mptsas to -base (bsc#968206)

- supported.conf: Add the qemu scsi driver (sym53c8xx) to
-base (bsc#967802)

- supported.conf: Add tulip to -base for Hyper-V (bsc#968234)

- supported.conf: Add virtio-rng (bsc#966026)

- supported.conf: Add xen-blkfront.

- supported.conf: Add xfs to -base (bsc#965891)

- supported.conf: Fix usb-common path usb-common moved to its own subdirectory in kernel v3.16, and we backported that change to SLE12.

- sysctl: do not add hardlockup_all_cpu_backtrace sysctl on UP.

- tcp: Restore RFC5961-compliant behavior for SYN packets (bsc#966864).

- Update config files. Add new option CONFIG_PARAVIRT_XEN_BLKDEV_FRONTEND to i386 xen and ec2.

- Update config files. Enable CONFIG_DEBUG_INFO for ec2 flavor. It's overriden on build anyway and having it disabled causes 'make silentoldconfig' checks fail because of new symbol CONFIG_DEBUG_INFO_REDUCED.

- Update config files: enable CONFIG_PCI_HYPERV in non-SLE configs These are i386/* except xen, ec2 and vanilla and x86_64 desktop and trace.

- Update config files: enable MACH_CUBOX in armv7hl/cubox

- Update config files: ppc and ppc64 are big endian New config options (not existing in 13.1) need to be set accordingly.

- Update patches.drivers/drm-ast-Initialize-data-needed-to-map-fb dev-memory.patch (bnc#880007). Fix refs and upstream status.

- Update Xen config files (enable upstream block frontend).

- Update Xen patches to 3.12.55.

- USB: ehci-s5p: Fix phy reset.

- usb: phy: Fix phy-samsung-usb when built as module.

- usb: Quiet down false peer failure messages (bnc#960629).

- x86: export x86_msi (bnc#965924).

- xen: Add /etc/modprobe.d/50-xen.conf selecting Xen frontend driver implementation (bsc#957986, bsc#956084, bsc#961658).

- xen-blkfront: allow building in our Xen environment (bsc#957986 fate#320625).

- xen, blkfront: factor out flush-related checks from do_blkif_request() (bsc#957986 fate#320625).

- xen-blkfront: fix accounting of reqs when migrating (bsc#957986 fate#320625).

- xen/blkfront: Fix crash if backend does not follow the right states (bsc#957986 fate#320625).

- xen-blkfront: improve aproximation of required grants per request (bsc#957986 fate#320625).

- xen/blkfront: improve protection against issuing unsupported REQ_FUA (bsc#957986 fate#320625).

- xen/blkfront: remove redundant flush_op (bsc#957986 fate#320625).

- xen-blkfront: remove type check from blkfront_setup_discard (bsc#957986 fate#320625).

- xen-blkfront: Silence pfn maybe-uninitialized warning (bsc#957986 fate#320625).

- xen: fix blkfront and blkback build with normal xen.

- xen-vscsi-large-requests: Fix resource collision for racing request maps and unmaps (bsc#966094).

- xfs/dmapi: drop lock over synchronous XFS_SEND_DATA events (bsc#969993).

- xfs/dmapi: propertly send postcreate event (bsc#967299).

Solution

Update the affected the Linux Kernel packages.

Plugin Details

Severity: Critical

ID: 90783

File Name: openSUSE-2016-518.nasl

Version: 2.7

Type: local

Agent: unix

Family: SuSE Local Security Checks

Published: 4/29/2016

Updated: 1/19/2021

Supported Sensors: Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: High

Score: 7.1

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 9.4

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:ipset-debuginfo, p-cpe:/a:novell:opensuse:ipset-debugsource, p-cpe:/a:novell:opensuse:ipset-devel, p-cpe:/a:novell:opensuse:ipset-kmp-default, p-cpe:/a:novell:opensuse:ipset-kmp-default-debuginfo, p-cpe:/a:novell:opensuse:ipset-kmp-desktop, p-cpe:/a:novell:opensuse:ipset-kmp-desktop-debuginfo, p-cpe:/a:novell:opensuse:ipset-kmp-pae, p-cpe:/a:novell:opensuse:ipset-kmp-pae-debuginfo, p-cpe:/a:novell:opensuse:ipset-kmp-xen, p-cpe:/a:novell:opensuse:ipset-kmp-xen-debuginfo, p-cpe:/a:novell:opensuse:iscsitarget, p-cpe:/a:novell:opensuse:iscsitarget-debuginfo, p-cpe:/a:novell:opensuse:iscsitarget-debugsource, p-cpe:/a:novell:opensuse:iscsitarget-kmp-default, p-cpe:/a:novell:opensuse:iscsitarget-kmp-default-debuginfo, p-cpe:/a:novell:opensuse:iscsitarget-kmp-desktop, p-cpe:/a:novell:opensuse:iscsitarget-kmp-desktop-debuginfo, p-cpe:/a:novell:opensuse:iscsitarget-kmp-pae, p-cpe:/a:novell:opensuse:iscsitarget-kmp-pae-debuginfo, p-cpe:/a:novell:opensuse:iscsitarget-kmp-xen, p-cpe:/a:novell:opensuse:iscsitarget-kmp-xen-debuginfo, p-cpe:/a:novell:opensuse:kernel-debug, p-cpe:/a:novell:opensuse:kernel-debug-base, p-cpe:/a:novell:opensuse:kernel-debug-base-debuginfo, p-cpe:/a:novell:opensuse:kernel-debug-debuginfo, p-cpe:/a:novell:opensuse:kernel-debug-debugsource, p-cpe:/a:novell:opensuse:cloop, p-cpe:/a:novell:opensuse:cloop-debuginfo, p-cpe:/a:novell:opensuse:cloop-debugsource, p-cpe:/a:novell:opensuse:cloop-kmp-default, p-cpe:/a:novell:opensuse:cloop-kmp-default-debuginfo, p-cpe:/a:novell:opensuse:cloop-kmp-desktop, p-cpe:/a:novell:opensuse:kernel-debug-devel, p-cpe:/a:novell:opensuse:kernel-debug-devel-debuginfo, p-cpe:/a:novell:opensuse:kernel-default, p-cpe:/a:novell:opensuse:kernel-default-base, p-cpe:/a:novell:opensuse:kernel-default-base-debuginfo, p-cpe:/a:novell:opensuse:kernel-default-debuginfo, p-cpe:/a:novell:opensuse:kernel-default-debugsource, p-cpe:/a:novell:opensuse:kernel-default-devel, p-cpe:/a:novell:opensuse:kernel-desktop, p-cpe:/a:novell:opensuse:kernel-desktop-base, p-cpe:/a:novell:opensuse:kernel-desktop-base-debuginfo, p-cpe:/a:novell:opensuse:kernel-desktop-debuginfo, p-cpe:/a:novell:opensuse:kernel-desktop-debugsource, p-cpe:/a:novell:opensuse:kernel-desktop-devel, p-cpe:/a:novell:opensuse:kernel-devel, p-cpe:/a:novell:opensuse:kernel-ec2, p-cpe:/a:novell:opensuse:kernel-ec2-base, p-cpe:/a:novell:opensuse:kernel-ec2-base-debuginfo, p-cpe:/a:novell:opensuse:kernel-ec2-debuginfo, p-cpe:/a:novell:opensuse:kernel-ec2-debugsource, p-cpe:/a:novell:opensuse:kernel-ec2-devel, p-cpe:/a:novell:opensuse:kernel-macros, p-cpe:/a:novell:opensuse:kernel-pae, p-cpe:/a:novell:opensuse:kernel-pae-base, p-cpe:/a:novell:opensuse:kernel-pae-base-debuginfo, p-cpe:/a:novell:opensuse:cloop-kmp-desktop-debuginfo, p-cpe:/a:novell:opensuse:cloop-kmp-pae, p-cpe:/a:novell:opensuse:cloop-kmp-pae-debuginfo, p-cpe:/a:novell:opensuse:cloop-kmp-xen, p-cpe:/a:novell:opensuse:cloop-kmp-xen-debuginfo, p-cpe:/a:novell:opensuse:crash, p-cpe:/a:novell:opensuse:crash-debuginfo, p-cpe:/a:novell:opensuse:crash-debugsource, p-cpe:/a:novell:opensuse:crash-devel, p-cpe:/a:novell:opensuse:crash-eppic, p-cpe:/a:novell:opensuse:crash-eppic-debuginfo, p-cpe:/a:novell:opensuse:crash-gcore, p-cpe:/a:novell:opensuse:crash-gcore-debuginfo, p-cpe:/a:novell:opensuse:crash-kmp-default, p-cpe:/a:novell:opensuse:crash-kmp-default-debuginfo, p-cpe:/a:novell:opensuse:crash-kmp-desktop, p-cpe:/a:novell:opensuse:crash-kmp-desktop-debuginfo, p-cpe:/a:novell:opensuse:crash-kmp-pae, p-cpe:/a:novell:opensuse:crash-kmp-pae-debuginfo, p-cpe:/a:novell:opensuse:crash-kmp-xen, p-cpe:/a:novell:opensuse:crash-kmp-xen-debuginfo, p-cpe:/a:novell:opensuse:hdjmod-debugsource, p-cpe:/a:novell:opensuse:hdjmod-kmp-default, p-cpe:/a:novell:opensuse:hdjmod-kmp-default-debuginfo, p-cpe:/a:novell:opensuse:hdjmod-kmp-desktop, p-cpe:/a:novell:opensuse:hdjmod-kmp-desktop-debuginfo, p-cpe:/a:novell:opensuse:hdjmod-kmp-pae, p-cpe:/a:novell:opensuse:hdjmod-kmp-pae-debuginfo, p-cpe:/a:novell:opensuse:hdjmod-kmp-xen, p-cpe:/a:novell:opensuse:hdjmod-kmp-xen-debuginfo, p-cpe:/a:novell:opensuse:ipset, p-cpe:/a:novell:opensuse:kernel-pae-debuginfo, p-cpe:/a:novell:opensuse:kernel-pae-debugsource, p-cpe:/a:novell:opensuse:kernel-pae-devel, p-cpe:/a:novell:opensuse:kernel-source, p-cpe:/a:novell:opensuse:kernel-source-vanilla, p-cpe:/a:novell:opensuse:kernel-syms, p-cpe:/a:novell:opensuse:kernel-trace, p-cpe:/a:novell:opensuse:kernel-trace-base, p-cpe:/a:novell:opensuse:kernel-trace-base-debuginfo, p-cpe:/a:novell:opensuse:kernel-trace-debuginfo, p-cpe:/a:novell:opensuse:kernel-trace-debugsource, p-cpe:/a:novell:opensuse:kernel-trace-devel, p-cpe:/a:novell:opensuse:kernel-vanilla, p-cpe:/a:novell:opensuse:kernel-vanilla-debuginfo, p-cpe:/a:novell:opensuse:kernel-vanilla-debugsource, p-cpe:/a:novell:opensuse:kernel-vanilla-devel, p-cpe:/a:novell:opensuse:pcfclock-kmp-default, p-cpe:/a:novell:opensuse:pcfclock-kmp-default-debuginfo, p-cpe:/a:novell:opensuse:pcfclock-kmp-desktop, p-cpe:/a:novell:opensuse:pcfclock-kmp-desktop-debuginfo, p-cpe:/a:novell:opensuse:pcfclock-kmp-pae, p-cpe:/a:novell:opensuse:pcfclock-kmp-pae-debuginfo, p-cpe:/a:novell:opensuse:python-openvswitch, p-cpe:/a:novell:opensuse:python-openvswitch-test, p-cpe:/a:novell:opensuse:python-virtualbox, p-cpe:/a:novell:opensuse:python-virtualbox-debuginfo, p-cpe:/a:novell:opensuse:vhba-kmp-debugsource, p-cpe:/a:novell:opensuse:vhba-kmp-default, p-cpe:/a:novell:opensuse:vhba-kmp-default-debuginfo, p-cpe:/a:novell:opensuse:vhba-kmp-desktop, p-cpe:/a:novell:opensuse:vhba-kmp-desktop-debuginfo, p-cpe:/a:novell:opensuse:vhba-kmp-pae, p-cpe:/a:novell:opensuse:vhba-kmp-pae-debuginfo, p-cpe:/a:novell:opensuse:vhba-kmp-xen, p-cpe:/a:novell:opensuse:vhba-kmp-xen-debuginfo, p-cpe:/a:novell:opensuse:virtualbox, p-cpe:/a:novell:opensuse:virtualbox-debuginfo, p-cpe:/a:novell:opensuse:virtualbox-debugsource, p-cpe:/a:novell:opensuse:virtualbox-devel, p-cpe:/a:novell:opensuse:virtualbox-guest-kmp-default, p-cpe:/a:novell:opensuse:virtualbox-guest-kmp-default-debuginfo, p-cpe:/a:novell:opensuse:virtualbox-guest-kmp-desktop, p-cpe:/a:novell:opensuse:virtualbox-guest-kmp-desktop-debuginfo, p-cpe:/a:novell:opensuse:virtualbox-guest-kmp-pae, p-cpe:/a:novell:opensuse:virtualbox-guest-kmp-pae-debuginfo, p-cpe:/a:novell:opensuse:virtualbox-guest-tools, p-cpe:/a:novell:opensuse:virtualbox-guest-tools-debuginfo, p-cpe:/a:novell:opensuse:virtualbox-guest-x11, p-cpe:/a:novell:opensuse:virtualbox-guest-x11-debuginfo, p-cpe:/a:novell:opensuse:virtualbox-host-kmp-default, p-cpe:/a:novell:opensuse:virtualbox-host-kmp-default-debuginfo, p-cpe:/a:novell:opensuse:virtualbox-host-kmp-desktop, p-cpe:/a:novell:opensuse:virtualbox-host-kmp-desktop-debuginfo, p-cpe:/a:novell:opensuse:virtualbox-host-kmp-pae, p-cpe:/a:novell:opensuse:virtualbox-host-kmp-pae-debuginfo, p-cpe:/a:novell:opensuse:virtualbox-host-source, p-cpe:/a:novell:opensuse:virtualbox-qt, p-cpe:/a:novell:opensuse:virtualbox-qt-debuginfo, p-cpe:/a:novell:opensuse:virtualbox-websrv, p-cpe:/a:novell:opensuse:virtualbox-websrv-debuginfo, p-cpe:/a:novell:opensuse:xen, p-cpe:/a:novell:opensuse:xen-debugsource, p-cpe:/a:novell:opensuse:xen-devel, p-cpe:/a:novell:opensuse:xen-doc-html, p-cpe:/a:novell:opensuse:xen-kmp-default, p-cpe:/a:novell:opensuse:xen-kmp-default-debuginfo, p-cpe:/a:novell:opensuse:xen-kmp-desktop, p-cpe:/a:novell:opensuse:xen-kmp-desktop-debuginfo, p-cpe:/a:novell:opensuse:xen-kmp-pae, p-cpe:/a:novell:opensuse:xen-kmp-pae-debuginfo, p-cpe:/a:novell:opensuse:xen-libs, p-cpe:/a:novell:opensuse:xen-libs-32bit, p-cpe:/a:novell:opensuse:xen-libs-debuginfo, p-cpe:/a:novell:opensuse:xen-libs-debuginfo-32bit, p-cpe:/a:novell:opensuse:xen-tools, p-cpe:/a:novell:opensuse:xen-tools-debuginfo, p-cpe:/a:novell:opensuse:xen-tools-domu, p-cpe:/a:novell:opensuse:xen-tools-domu-debuginfo, p-cpe:/a:novell:opensuse:xen-xend-tools, p-cpe:/a:novell:opensuse:xen-xend-tools-debuginfo, p-cpe:/a:novell:opensuse:xtables-addons, p-cpe:/a:novell:opensuse:xtables-addons-debuginfo, p-cpe:/a:novell:opensuse:xtables-addons-debugsource, p-cpe:/a:novell:opensuse:xtables-addons-kmp-default, p-cpe:/a:novell:opensuse:xtables-addons-kmp-default-debuginfo, p-cpe:/a:novell:opensuse:xtables-addons-kmp-desktop, p-cpe:/a:novell:opensuse:xtables-addons-kmp-desktop-debuginfo, p-cpe:/a:novell:opensuse:xtables-addons-kmp-pae, p-cpe:/a:novell:opensuse:xtables-addons-kmp-pae-debuginfo, p-cpe:/a:novell:opensuse:xtables-addons-kmp-xen, p-cpe:/a:novell:opensuse:xtables-addons-kmp-xen-debuginfo, cpe:/o:novell:opensuse:13.1, p-cpe:/a:novell:opensuse:kernel-xen, p-cpe:/a:novell:opensuse:kernel-xen-base, p-cpe:/a:novell:opensuse:kernel-xen-base-debuginfo, p-cpe:/a:novell:opensuse:kernel-xen-debuginfo, p-cpe:/a:novell:opensuse:kernel-xen-debugsource, p-cpe:/a:novell:opensuse:kernel-xen-devel, p-cpe:/a:novell:opensuse:libipset3, p-cpe:/a:novell:opensuse:libipset3-debuginfo, p-cpe:/a:novell:opensuse:ndiswrapper, p-cpe:/a:novell:opensuse:ndiswrapper-debuginfo, p-cpe:/a:novell:opensuse:ndiswrapper-debugsource, p-cpe:/a:novell:opensuse:ndiswrapper-kmp-default, p-cpe:/a:novell:opensuse:ndiswrapper-kmp-default-debuginfo, p-cpe:/a:novell:opensuse:ndiswrapper-kmp-desktop, p-cpe:/a:novell:opensuse:ndiswrapper-kmp-desktop-debuginfo, p-cpe:/a:novell:opensuse:ndiswrapper-kmp-pae, p-cpe:/a:novell:opensuse:ndiswrapper-kmp-pae-debuginfo, p-cpe:/a:novell:opensuse:openvswitch, p-cpe:/a:novell:opensuse:openvswitch-controller, p-cpe:/a:novell:opensuse:openvswitch-controller-debuginfo, p-cpe:/a:novell:opensuse:openvswitch-debuginfo, p-cpe:/a:novell:opensuse:openvswitch-debugsource, p-cpe:/a:novell:opensuse:openvswitch-kmp-default, p-cpe:/a:novell:opensuse:openvswitch-kmp-default-debuginfo, p-cpe:/a:novell:opensuse:openvswitch-kmp-desktop, p-cpe:/a:novell:opensuse:openvswitch-kmp-desktop-debuginfo, p-cpe:/a:novell:opensuse:openvswitch-kmp-pae, p-cpe:/a:novell:opensuse:openvswitch-kmp-pae-debuginfo, p-cpe:/a:novell:opensuse:openvswitch-kmp-xen, p-cpe:/a:novell:opensuse:openvswitch-kmp-xen-debuginfo, p-cpe:/a:novell:opensuse:openvswitch-pki, p-cpe:/a:novell:opensuse:openvswitch-switch, p-cpe:/a:novell:opensuse:openvswitch-switch-debuginfo, p-cpe:/a:novell:opensuse:openvswitch-test, p-cpe:/a:novell:opensuse:pcfclock, p-cpe:/a:novell:opensuse:pcfclock-debuginfo, p-cpe:/a:novell:opensuse:pcfclock-debugsource

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 4/28/2016

Reference Information

CVE: CVE-2015-8551, CVE-2015-8552, CVE-2015-8709, CVE-2015-8785, CVE-2015-8812, CVE-2015-8816, CVE-2016-0723, CVE-2016-2143, CVE-2016-2184, CVE-2016-2384, CVE-2016-2782, CVE-2016-3139, CVE-2016-3156

Detections

Analytics