Vulnerability CVE-2017-7228

Vulnerability Name:

CVE-2017-7228 (CCN-124082)

Assigned:

2017-04-04

Published:

2017-04-04

Updated:

2019-10-03

Summary:

An issue (known as XSA-212) was discovered in Xen, with fixes available for 4.8.x, 4.7.x, 4.6.x, 4.5.x, and 4.4.x. The earlier XSA-29 fix introduced an insufficient check on XENMEM_exchange input, allowing the caller to drive hypervisor memory accesses outside of the guest provided input/output arrays.

CVSS v3 Severity:

8.2 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
7.6 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H/E:F/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): High User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

6.7 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
6.2 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): High User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

7.2 High (CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

6.8 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

CWE-129

Vulnerability Consequences:

Gain Privileges

References:

Source: MITRE
Type: CNA
CVE-2017-7228

Source: CONFIRM
Type: Mailing List, Third Party Advisory
http://openwall.com/lists/oss-security/2017/04/04/3

Source: DEBIAN
Type: UNKNOWN
DSA-3847

Source: BID
Type: Third Party Advisory, VDB Entry
97375

Source: CCN
Type: BID-97375
Xen 'memory_exchange()' Function Incomplete Fix Privilege Escalation Vulnerability

Source: SECTRACK
Type: UNKNOWN
1038223

Source: CCN
Type: Xen Security Advisory XSA-212
x86: broken check in memory_exchange() permits PV guest breakout

Source: CONFIRM
Type: Patch, Vendor Advisory
http://xenbits.xen.org/xsa/advisory-212.html

Source: XF
Type: UNKNOWN
xen-cve20177228-priv-esc(124082)

Source: CONFIRM
Type: UNKNOWN
https://github.com/QubesOS/qubes-secpack/blob/master/QSBs/qsb-029-2017.txt

Source: MISC
Type: Technical Description, Third Party Advisory
https://googleprojectzero.blogspot.com/2017/04/pandavirtualization-exploiting-xen.html

Source: CCN
Type: Packet Storm Security
Xen memory_exchange() Guest Breakout

Source: EXPLOIT-DB
Type: UNKNOWN
41870

Vulnerable Configuration:

Configuration 1:

cpe:/o:xen:xen:-:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:xensource:xen:*:*:*:*:*:*:*:*

Denotes that component is vulnerable

Oval Definitions

Definition ID	Class	Title	Last Modified
oval:org.opensuse.security:def:20177228	V	CVE-2017-7228	2022-05-20
oval:org.opensuse.security:def:42279	P	Security update for ldb (Low)	2022-05-09
oval:org.opensuse.security:def:42348	P	Security update for gnutls (Moderate)	2022-03-04
oval:org.opensuse.security:def:42170	P	Security update for virglrenderer (Important)	2022-01-18
oval:org.opensuse.security:def:30172	P	Security update for apache2 (Important)	2022-01-12
oval:org.opensuse.security:def:33759	P	Security update for chrony (Moderate)	2021-12-22
oval:org.opensuse.security:def:35280	P	Security update for libqt4 (Important)	2021-12-22
oval:org.opensuse.security:def:41915	P	Security update for xorg-x11-server (Important)	2021-12-20
oval:org.opensuse.security:def:41914	P	Security update for xorg-x11-server (Important)	2021-12-14
oval:org.opensuse.security:def:31713	P	Security update for clamav (Moderate)	2021-12-01
oval:org.opensuse.security:def:31304	P	Security update for the Linux Kernel (Live Patch 38 for SLE 12 SP3) (Important)	2021-11-19
oval:org.opensuse.security:def:34570	P	Security update for postgresql10 (Important)	2021-10-20
oval:org.opensuse.security:def:30259	P	Security update for postgresql10 (Important)	2021-10-20
oval:org.opensuse.security:def:30258	P	Security update for strongswan (Important)	2021-10-19
oval:org.opensuse.security:def:31691	P	Security update for apache2 (Important)	2021-10-06
oval:org.opensuse.security:def:40841	P	Security update for python27 (Moderate)	2021-09-30
oval:org.opensuse.security:def:42787	P	Security update for curl (Moderate)	2021-09-23
oval:org.opensuse.security:def:33014	P	Security update for sqlite3 (Important)	2021-09-23
oval:org.opensuse.security:def:33715	P	Security update for mariadb (Moderate)	2021-09-09
oval:org.opensuse.security:def:57085	P	Security update for openexr (Important)	2021-09-02
oval:org.opensuse.security:def:57084	P	Security update for bind (Moderate)	2021-08-30
oval:org.opensuse.security:def:34513	P	Security update for cpio (Important)	2021-08-23
oval:org.opensuse.security:def:31247	P	Security update for java-1_8_0-openjdk (Important)	2021-08-20
oval:org.opensuse.security:def:42112	P	Security update for krb5 (Important)	2021-08-20
oval:org.opensuse.security:def:34512	P	Security update for java-1_8_0-openjdk (Important)	2021-08-20
oval:org.opensuse.security:def:57490	P	Security update for fetchmail (Moderate)	2021-08-18
oval:org.opensuse.security:def:15015	P	libjpeg62-32bit-62.2.0-31.14.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:15231	P	xscreensaver-5.22-7.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:15086	P	libthai-data-0.1.25-4.2 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14945	P	libICE6-1.0.8-12.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14911	P	gstreamer-1.8.3-9.5 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:15204	P	tftp-5.2-11.6.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:15066	P	libraptor2-0-2.0.10-3.63 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:14919	P	gvim-7.4.326-17.3.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:15110	P	libyaml-0-2-0.1.6-7.1 on GA media (Moderate)	2021-08-16
oval:org.opensuse.security:def:31662	P	Security update for libsndfile (Critical)	2021-08-05
oval:org.opensuse.security:def:31661	P	Security update for webkit2gtk3 (Important)	2021-08-03
oval:org.opensuse.security:def:33691	P	Security update for qemu (Important)	2021-07-28
oval:org.opensuse.security:def:20479	P	Security update for the Linux Kernel (Live Patch 16 for SLE 12 SP5) (Important)	2021-07-27
oval:org.opensuse.security:def:57944	P	Security update for webkit2gtk3 (Important)	2021-06-17
oval:org.opensuse.security:def:17116	P	libIlmImf-Imf_2_1-21-32bit-2.1.0-4.5 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11993	P	pidgin-otr-4.0.0-11.6 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36444	P	libevent-devel-1.4.5-24.24.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11963	P	libxerces-c-3_1-3.1.1-12.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12195	P	libevent-2_0-5-2.0.21-4.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:42690	P	pyxml-0.8.4-194.23.38 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:15306	P	giflib-progs-5.0.5-12.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17235	P	gegl-0_2-0.2.0-14.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12271	P	libssh2-1-1.4.3-19.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12086	P	cups-pk-helper-0.2.5-5.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:42742	P	xorg-x11-libXrender-32bit-7.4-1.16.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:11971	P	mipv6d-2.0.2.umip.0.4-19.77 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:15967	P	id3lib-3.8.3-261.119 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12120	P	gimp-2.8.18-8.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:42626	P	libsoup-2_4-1-2.32.2-4.13.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:15290	P	elfutils-0.158-6.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17150	P	typelib-1_0-EvinceDocument-3_0-3.20.1-5.66 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12262	P	libsilc-1_1-2-1.1.10-24.128 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12039	P	xalan-j2-2.7.0-264.133 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:36486	P	libsndfile-devel-1.0.20-2.6.5 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17108	P	gstreamer-0_10-plugins-bad-0.10.23-20.51 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12220	P	libksba8-1.3.0-23.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:15944	P	freerdp-devel-2.0.0~git.1463131968.4e66df7-11.69 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:17292	P	pulseaudio-module-bluetooth-5.0-4.1 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12284	P	libvmtools0-10.1.5-2.17 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:12101	P	emacs-24.3-19.2 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:15279	P	davfs2-1.5.2-2.3 on GA media (Moderate)	2021-06-08
oval:org.opensuse.security:def:32935	P	Security update for gstreamer-plugins-bad (Important)	2021-06-07
oval:org.opensuse.security:def:20441	P	Security update for the Linux Kernel (Live Patch 10 for SLE 12 SP5) (Important)	2021-05-25
oval:org.opensuse.security:def:20263	P	Security update for the Linux Kernel (Live Patch 14 for SLE 12 SP4) (Important)	2021-05-25
oval:org.opensuse.security:def:31623	P	Security update for libxml2 (Important)	2021-05-19
oval:org.opensuse.security:def:33652	P	Security update for libxml2 (Important)	2021-05-19
oval:org.opensuse.security:def:42067	P	Security update for python3 (Moderate)	2021-05-11
oval:org.opensuse.security:def:29353	P	Security update for gdm (Important)	2021-04-28
oval:org.opensuse.security:def:31155	P	Security update for MozillaFirefox (Important)	2021-04-27
oval:org.opensuse.security:def:30185	P	Security update for MozillaFirefox (Important)	2021-04-27
oval:org.opensuse.security:def:34414	P	Security update for java-11-openjdk (Important)	2021-04-26
oval:org.opensuse.security:def:34415	P	Security update for apache-commons-io (Moderate)	2021-04-26
oval:org.opensuse.security:def:30184	P	Security update for qemu (Important)	2021-04-22
oval:org.opensuse.security:def:28914	P	Security update for xen (Important)	2021-04-20
oval:org.opensuse.security:def:30173	P	Security update for the Linux Kernel (Live Patch 37 for SLE 12 SP2) (Important)	2021-04-12
oval:org.opensuse.security:def:30174	P	Security update for the Linux Kernel (Live Patch 34 for SLE 12 SP2) (Important)	2021-04-12
oval:org.opensuse.security:def:28913	P	Security update for fwupdate (Important)	2021-04-09
oval:org.opensuse.security:def:31603	P	Security update for fwupdate (Important)	2021-04-08
oval:org.opensuse.security:def:20407	P	Security update for the Linux Kernel (Live Patch 6 for SLE 12 SP5) (Important)	2021-04-07
oval:org.opensuse.security:def:34397	P	Security update for xen (Important)	2021-04-06
oval:org.opensuse.security:def:34660	P	Security update for wavpack (Important)	2021-03-24
oval:org.opensuse.security:def:34659	P	Security update for python36 (Moderate)	2021-03-19
oval:org.opensuse.security:def:20718	P	Security update for openldap2 (Important)	2021-03-03
oval:org.opensuse.security:def:42867	P	Security update for salt (Critical)	2021-02-26
oval:org.opensuse.security:def:34569	P	Security update for the Linux Kernel (Important)	2021-02-09
oval:org.opensuse.security:def:57107	P	Security update for python3 (Important)	2021-02-08
oval:org.opensuse.security:def:31624	P	Security update for dnsmasq (Important)	2021-01-19
oval:org.opensuse.security:def:32924	P	Security update for perl-Convert-ASN1 (Moderate)	2021-01-19
oval:org.opensuse.security:def:31652	P	Security update for openssh (Moderate)	2021-01-05
oval:org.opensuse.security:def:28925	P	Security update for java-1_8_0-ibm (Moderate)	2021-01-05
oval:org.opensuse.security:def:32923	P	Security update for flac (Moderate)	2021-01-04
oval:org.opensuse.security:def:34437	P	Security update for flac (Moderate)	2021-01-04
oval:org.opensuse.security:def:21356	P	Security update for spice-gtk (Important)	2020-12-16
oval:org.opensuse.security:def:20228	P	Security update for the Linux Kernel (Live Patch 12 for SLE 12 SP4) (Important)	2020-12-07
oval:org.opensuse.security:def:17359	P	libplist++3-1.12-20.3.2 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35713	P	gstreamer-0_10-plugins-base-0.10.35-5.15.8 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:12944	P	libSoundTouch0-1.7.1-5.11.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35734	P	ldapsmb-1.34b-12.18.3 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35646	P	unzip-5.52-142.23.43 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35714	P	gstreamer-0_10-plugins-good-0.10.30-5.8.11 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:42018	P	mailman-2.1.12-0.1.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35806	P	perl-Tk-804.028-50.24 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:17323	P	gstreamer-0_10-plugins-bad-0.10.23-25.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35672	P	avahi-0.6.23-11.19.22 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:12922	P	jakarta-commons-fileupload-1.1.1-122.3.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35695	P	fetchmail-6.3.8.90-13.20.19.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35587	P	libgtop-2.28.0-1.2.20 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35673	P	bind-9.6ESVR5P1-0.8.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:41926	P	PackageKit-0.3.14-2.12.105 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:35762	P	libpulse-browse0-0.9.23-0.7.128 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:42450	P	t1lib-5.1.1-100.21.1 on GA media (Moderate)	2020-12-03
oval:org.opensuse.security:def:38534	P	zypper on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:34959	P	Security update for freeradius-server (Moderate)	2020-12-01
oval:org.opensuse.security:def:57665	P	apache-commons-httpclient on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54250	P	libXvMC1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:30833	P	Security update for curl (Moderate)	2020-12-01
oval:org.opensuse.security:def:27713	P	Security update for bind (Important)	2020-12-01
oval:org.opensuse.security:def:40078	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:18782	P	Security update for php5 (Moderate)	2020-12-01
oval:org.opensuse.security:def:27199	P	libmysqlclient15-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33244	P	python-pam on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:30624	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:39178	P	lhasa on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:34925	P	Security update for expat (Moderate)	2020-12-01
oval:org.opensuse.security:def:41429	P	Security update for the Linux Kernel (Live Patch 32 for SLE 12 SP3) (Important)	2020-12-01
oval:org.opensuse.security:def:19944	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:27823	P	Security update for libwmf (Moderate)	2020-12-01
oval:org.opensuse.security:def:34278	P	Security update for python (Important)	2020-12-01
oval:org.opensuse.security:def:40910	P	Security update for the Linux Kernel (Live Patch 31 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:19153	P	Security update for gegl (Moderate)	2020-12-01
oval:org.opensuse.security:def:28494	P	Security update for openssl1	2020-12-01
oval:org.opensuse.security:def:30385	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:34184	P	Security update for openvpn	2020-12-01
oval:org.opensuse.security:def:29506	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:34877	P	Security update for curl	2020-12-01
oval:org.opensuse.security:def:54809	P	icu on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:30985	P	Security update for inn (Moderate)	2020-12-01
oval:org.opensuse.security:def:26996	P	nfs-client on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53805	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:30536	P	Security update for java-1_7_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:35427	P	Security update for openssl1 (Important)	2020-12-01
oval:org.opensuse.security:def:30922	P	Security update for gd (Moderate)	2020-12-01
oval:org.opensuse.security:def:39353	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:18230	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:34182	P	Security update for openssl1 (Important)	2020-12-01
oval:org.opensuse.security:def:30391	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:38870	P	libsilc-1_1-2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27625	P	Security update for java-1_4_2-ibm	2020-12-01
oval:org.opensuse.security:def:41304	P	Security update for ucode-intel (Important)	2020-12-01
oval:org.opensuse.security:def:19256	P	Security update for zziplib (Moderate)	2020-12-01
oval:org.opensuse.security:def:29231	P	Security update for python (Moderate)	2020-12-01
oval:org.opensuse.security:def:30949	P	Security update for glibc (Moderate)	2020-12-01
oval:org.opensuse.security:def:40580	P	Security update for mailman (Important)	2020-12-01
oval:org.opensuse.security:def:18969	P	Security update for avahi (Moderate)	2020-12-01
oval:org.opensuse.security:def:28240	P	Security update for libvorbis (Moderate)	2020-12-01
oval:org.opensuse.security:def:34818	P	Security update for aspell (Moderate)	2020-12-01
oval:org.opensuse.security:def:29666	P	Security update for cyrus-imapd (Low)	2020-12-01
oval:org.opensuse.security:def:35035	P	Security update for icu (Moderate)	2020-12-01
oval:org.opensuse.security:def:29211	P	Security update for openvpn (Important)	2020-12-01
oval:org.opensuse.security:def:58580	P	Security update for ceph (Moderate)	2020-12-01
oval:org.opensuse.security:def:30938	P	Security update for glibc	2020-12-01
oval:org.opensuse.security:def:35179	P	Security update for kvm (Important)	2020-12-01
oval:org.opensuse.security:def:54643	P	pam-modules on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17558	P	Security update for gdm (Low)	2020-12-01
oval:org.opensuse.security:def:27771	P	Security update for java-1_7_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:40476	P	Security update for perl (Important)	2020-12-01
oval:org.opensuse.security:def:38546	P	apache2-mod_nss on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27337	P	xorg-x11-libxcb-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33389	P	Security update for lighttpd (Moderate)	2020-12-01
oval:org.opensuse.security:def:30834	P	Security update for curl (Moderate)	2020-12-01
oval:org.opensuse.security:def:28533	P	Security update for bogofilter	2020-12-01
oval:org.opensuse.security:def:34990	P	Security update for glibc	2020-12-01
oval:org.opensuse.security:def:32395	P	Security update for unrar (Important)	2020-12-01
oval:org.opensuse.security:def:20220	P	Security update for the Linux Kernel (Live Patch 38 for SLE 12) (Important)	2020-12-01
oval:org.opensuse.security:def:18790	P	Security update for libtasn1 (Moderate)	2020-12-01
oval:org.opensuse.security:def:28015	P	Security update for augeas (Moderate)	2020-12-01
oval:org.opensuse.security:def:31391	P	Security update for pam (Moderate)	2020-12-01
oval:org.opensuse.security:def:41188	P	Security update for ppp (Important)	2020-12-01
oval:org.opensuse.security:def:34926	P	Security update for expat (Moderate)	2020-12-01
oval:org.opensuse.security:def:21382	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:34279	P	Security update for python (Moderate)	2020-12-01
oval:org.opensuse.security:def:20591	P	Security update for the Linux Kernel (Live Patch 16 for SLE 12 SP1) (Important)	2020-12-01
oval:org.opensuse.security:def:29609	P	Security update for bind (Important)	2020-12-01
oval:org.opensuse.security:def:58509	P	Security update for libzypp, zypper (Important)	2020-12-01
oval:org.opensuse.security:def:54928	P	libsoup-2_4-1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:34948	P	Security update for MozillaFirefox, firefox-glib2, firefox-gtk3 (Important)	2020-12-01
oval:org.opensuse.security:def:54084	P	mipv6d on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:30778	P	Security update for bash	2020-12-01
oval:org.opensuse.security:def:30986	P	Security update for intel-SINIT (Important)	2020-12-01
oval:org.opensuse.security:def:40036	P	Security update for java-1_7_1-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:27812	P	Security update for LibreOffice	2020-12-01
oval:org.opensuse.security:def:27071	P	NetworkManager-gnome on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33149	P	libfreebl3 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:30537	P	Security update for java-1_7_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:39018	P	icu on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17501	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:41378	P	Security update for python3-requests (Moderate)	2020-12-01
oval:org.opensuse.security:def:19918	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:34183	P	Security update for openswan	2020-12-01
oval:org.opensuse.security:def:34194	P	Security update for pam_pkcs11 (Moderate)	2020-12-01
oval:org.opensuse.security:def:19041	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:28445	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:20694	P	Security update for pam (Moderate)	2020-12-01
oval:org.opensuse.security:def:30348	P	Security update for vim (Important)	2020-12-01
oval:org.opensuse.security:def:34819	P	Security update for aspell (Moderate)	2020-12-01
oval:org.opensuse.security:def:54735	P	bzip2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:30941	P	Security update for glibc (Moderate)	2020-12-01
oval:org.opensuse.security:def:26995	P	nagios-plugins on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:53567	P	Security update for u-boot (Important)	2020-12-01
oval:org.opensuse.security:def:30479	P	Security update for bind (Important)	2020-12-01
oval:org.opensuse.security:def:35337	P	Security update for Mozilla NSS	2020-12-01
oval:org.opensuse.security:def:58340	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:39325	P	Security update for java-1_6_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:17592	P	Security update for krb5 (Moderate)	2020-12-01
oval:org.opensuse.security:def:28444	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:53405	P	Security update for apache-commons-beanutils (Important)	2020-12-01
oval:org.opensuse.security:def:38767	P	pam_ssh on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27572	P	telepathy-gabble on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33603	P	Security update for MozillaFirefox (Moderate)	2020-12-01
oval:org.opensuse.security:def:19244	P	Security update for cups (Important)	2020-12-01
oval:org.opensuse.security:def:28593	P	Security update for openvpn	2020-12-01
oval:org.opensuse.security:def:40488	P	Security update for curl (Important)	2020-12-01
oval:org.opensuse.security:def:18911	P	Security update for wireshark (Moderate)	2020-12-01
oval:org.opensuse.security:def:28156	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:29648	P	Security update for curl (Moderate)	2020-12-01
oval:org.opensuse.security:def:34991	P	Security update for glibc (Important)	2020-12-01
oval:org.opensuse.security:def:43550	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:53404	P	Security update for nodejs10 (Important)	2020-12-01
oval:org.opensuse.security:def:29125	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:58630	P	Security update for tigervnc (Moderate)	2020-12-01
oval:org.opensuse.security:def:56278	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:35043	P	Security update for jakarta-commons-fileupload (Important)	2020-12-01
oval:org.opensuse.security:def:57774	P	libXt6 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:54535	P	libblkid1 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:30882	P	Security update for Mozilla Firefox	2020-12-01
oval:org.opensuse.security:def:27727	P	Security update for fastjar	2020-12-01
oval:org.opensuse.security:def:38535	P	DirectFB on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27280	P	python-pywbem on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33301	P	xorg-x11-libs-32bit on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:30779	P	Security update for bash (Important)	2020-12-01
oval:org.opensuse.security:def:39237	P	Security update for puppet (Important)	2020-12-01
oval:org.opensuse.security:def:34964	P	Security update for FUSE	2020-12-01
oval:org.opensuse.security:def:31757	P	Security update for LibVNCServer (Important)	2020-12-01
oval:org.opensuse.security:def:27887	P	Security update for rubygem-rack-1_4 (Moderate)	2020-12-01
oval:org.opensuse.security:def:41012	P	Security update for the Linux Kernel (Live Patch 25 for SLE 12 SP2) (Important)	2020-12-01
oval:org.opensuse.security:def:19186	P	Security update for python3 (Moderate)	2020-12-01
oval:org.opensuse.security:def:42816	P	Security update for libpng16 (Moderate)	2020-12-01
oval:org.opensuse.security:def:34947	P	Security update for MozillaFirefox, mozilla-nss (Important)	2020-12-01
oval:org.opensuse.security:def:34195	P	Security update for pango	2020-12-01
oval:org.opensuse.security:def:29560	P	Security update for NetworkManager	2020-12-01
oval:org.opensuse.security:def:58433	P	Security update for util-linux (Moderate)	2020-12-01
oval:org.opensuse.security:def:54847	P	libarchive13 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:57251	P	Security update for Mozilla NSS	2020-12-01
oval:org.opensuse.security:def:53978	P	gpg2 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:30623	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:30942	P	Security update for glibc (Important)	2020-12-01
oval:org.opensuse.security:def:39398	P	Security update for the Linux Kernel (Important)	2020-12-01
oval:org.opensuse.security:def:18256	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:27811	P	Security update for LibreOffice	2020-12-01
oval:org.opensuse.security:def:27007	P	pam_mount on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:30480	P	Security update for bind (Important)	2020-12-01
oval:org.opensuse.security:def:38928	P	libzmq3 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:17469	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:27674	P	Security update for subversion	2020-12-01
oval:org.opensuse.security:def:41349	P	Security update for tomcat (Important)	2020-12-01
oval:org.opensuse.security:def:19280	P	Security update for libssh (Important)	2020-12-01
oval:org.opensuse.security:def:29267	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:31023	P	Security update for java-1_7_0-ibm (Important)	2020-12-01
oval:org.opensuse.security:def:40732	P	Security update for ghostscript (Important)	2020-12-01
oval:org.opensuse.security:def:19003	P	Security update for apache2 (Important)	2020-12-01
oval:org.opensuse.security:def:28392	P	Security update for samba (Important)	2020-12-01
oval:org.opensuse.security:def:34876	P	Security update for cups (Important)	2020-12-01
oval:org.opensuse.security:def:20682	P	Security update for rpcbind (Important)	2020-12-01
oval:org.opensuse.security:def:29710	P	Security update for Mozilla Firefox	2020-12-01
oval:org.opensuse.security:def:20349	P	Security update for quagga (Important)	2020-12-01
oval:org.opensuse.security:def:29268	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:30921	P	Security update for gd (Moderate)	2020-12-01
oval:org.opensuse.security:def:58655	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:53427	P	Security update for php7 (Important)	2020-12-01
oval:org.opensuse.security:def:30390	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:58230	P	Security update for libvirt (Moderate)	2020-12-01
oval:org.opensuse.security:def:39286	P	Security update for rubygem-excon (Moderate)	2020-12-01
oval:org.opensuse.security:def:17570	P	Security update for MozillaFirefox (Important)	2020-12-01
oval:org.opensuse.security:def:28409	P	Security update for tidy (Low)	2020-12-01
oval:org.opensuse.security:def:30937	P	Security update for glib2 (Important)	2020-12-01
oval:org.opensuse.security:def:38630	P	krb5 on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:27421	P	inkscape on GA media (Moderate)	2020-12-01
oval:org.opensuse.security:def:33546	P	Security update for ImageMagick (Important)	2020-12-01
oval:org.opensuse.security:def:30883	P	Security update for Mozilla Firefox	2020-12-01
oval:org.opensuse.security:def:28549	P	Security update for Mozilla Firefox	2020-12-01
oval:org.opensuse.security:def:35034	P	Security update for icu (Moderate)	2020-12-01
oval:org.opensuse.security:def:32434	P	Security update for xen (Important)	2020-12-01
oval:org.opensuse.security:def:40477	P	Security update for libosinfo (Moderate)	2020-12-01
oval:org.opensuse.security:def:18825	P	Security update for libgit2 (Important)	2020-12-01
oval:org.opensuse.security:def:28099	P	Security update for git (Important)	2020-12-01
oval:org.opensuse.security:def:31547	P	Security update for sblim-sfcb (Moderate)	2020-12-01
oval:org.opensuse.security:def:41252	P	Security update for python (Important)	2020-12-01
oval:org.opensuse.security:def:34965	P	Security update for fuse (Moderate)	2020-12-01
oval:org.opensuse.security:def:43505	P	Security update for evince (Important)	2020-12-01
oval:org.opensuse.security:def:28994	P	Security update for conntrack-tools (Moderate)	2020-12-01
oval:org.opensuse.security:def:20624	P	Security update for gd (Moderate)	2020-12-01
oval:org.opensuse.security:def:58547	P	Security update for liblouis (Moderate)	2020-12-01
oval:org.opensuse.security:def:56204	P	Security update for ImageMagick (Moderate)	2020-12-01
oval:org.opensuse.security:def:78912	P	Security update for xen (Important)	2017-04-11
oval:org.opensuse.security:def:81365	P	Security update for xen (Important)	2017-04-11
oval:com.ubuntu.precise:def:20177228000	V	CVE-2017-7228 on Ubuntu 12.04 LTS (precise) - medium.	2017-04-04
oval:com.ubuntu.xenial:def:201772280000000	V	CVE-2017-7228 on Ubuntu 16.04 LTS (xenial) - medium.	2017-04-04
oval:com.ubuntu.trusty:def:20177228000	V	CVE-2017-7228 on Ubuntu 14.04 LTS (trusty) - medium.	2017-04-04
oval:com.ubuntu.xenial:def:20177228000	V	CVE-2017-7228 on Ubuntu 16.04 LTS (xenial) - medium.	2017-04-04

BACK