CVE-2017-12855 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-12855 Interim 1 33 2023-02-15T01:21:58Z current 2021-05-30T14:00:16Z 2023-02-15T01:21:58Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-12855 Xen maintains the _GTF_{read,writ}ing bits as appropriate, to inform the guest that a grant is in use. A guest is expected not to modify the grant details while it is in use, whereas the guest is free to modify/reuse the grant entry when it is not in use. Under some circumstances, Xen will clear the status bits too early, incorrectly informing the guest that the grant is no longer in use. A guest may prematurely believe that a granted frame is safely private again, and reuse it in a way which contains sensitive information, while the domain on the far end of the grant is still using the grant. Xen 4.9, 4.8, 4.7, 4.6, and 4.5 are affected. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00002.html E-Mail link for SUSE-SU-2017:2326-1 https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00003.html E-Mail link for SUSE-SU-2017:2327-1 https://lists.opensuse.org/opensuse-security-announce/2017-11/msg00026.html E-Mail link for SUSE-SU-2017:2327-2 https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00008.html E-Mail link for SUSE-SU-2017:2339-1 https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00038.html E-Mail link for SUSE-SU-2017:2450-1 https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00079.html E-Mail link for SUSE-SU-2017:2541-1 https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00023.html E-Mail link for openSUSE-SU-2017:2394-1 https://lists.opensuse.org/opensuse-security-announce/2017-09/msg00022.html E-Mail link for openSUSE-SU-2017:2398-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE Container as a Service Platform 2.0 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12 SP4-ESPOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Server Teradata 12 SP3 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 xen xen-4.0.3_21548_18-53.5.1 xen-4.11.0_08-1.11 xen-4.12.1_06-1.1 xen-4.2.5_21-45.5.1 xen-4.2.5_21-47.7.1 xen-4.4.4_22-22.51.2 xen-4.4.4_22-61.9.2 xen-4.7.3_03-43.9.1 xen-4.9.0_11-3.9.1 xen-devel xen-devel-4.11.0_08-1.11 xen-devel-4.12.1_06-1.1 xen-devel-4.4.4_22-61.9.2 xen-devel-4.7.3_03-43.9.1 xen-devel-4.9.0_11-3.9.1 xen-doc-html xen-doc-html-4.0.3_21548_18-53.5.1 xen-doc-html-4.11.0_08-1.11 xen-doc-html-4.12.1_06-1.1 xen-doc-html-4.2.5_21-45.5.1 xen-doc-html-4.2.5_21-47.7.1 xen-doc-html-4.4.4_22-22.51.2 xen-doc-html-4.4.4_22-61.9.2 xen-doc-html-4.7.3_03-43.9.1 xen-doc-html-4.9.0_11-3.9.1 xen-doc-pdf-4.0.3_21548_18-53.5.1 xen-doc-pdf-4.2.5_21-45.5.1 xen-doc-pdf-4.2.5_21-47.7.1 xen-kmp-default-4.0.3_21548_18_2.6.32.54_0.112.TDC-53.5.1 xen-kmp-default-4.2.5_21_3.0.101_0.125.TDC-47.7.1 xen-kmp-default-4.2.5_21_3.0.101_0.47.105-45.5.1 xen-kmp-default-4.4.4_22_3.0.101_108.7-61.9.2 xen-kmp-default-4.4.4_22_k3.12.61_52.89-22.51.2 xen-kmp-pae-4.2.5_21_3.0.101_0.47.105-45.5.1 xen-kmp-pae-4.4.4_22_3.0.101_108.7-61.9.2 xen-kmp-trace-4.0.3_21548_18_2.6.32.54_0.112.TDC-53.5.1 xen-libs xen-libs-32bit xen-libs-32bit-4.11.0_08-1.11 xen-libs-32bit-4.12.1_06-1.1 xen-libs-32bit-4.2.5_21-45.5.1 xen-libs-32bit-4.4.4_22-22.51.2 xen-libs-32bit-4.4.4_22-61.9.2 xen-libs-32bit-4.7.3_03-43.9.1 xen-libs-32bit-4.9.0_11-3.9.1 xen-libs-4.0.3_21548_18-53.5.1 xen-libs-4.11.0_08-1.11 xen-libs-4.12.1_06-1.1 xen-libs-4.2.5_21-45.5.1 xen-libs-4.2.5_21-47.7.1 xen-libs-4.4.4_22-22.51.2 xen-libs-4.4.4_22-61.9.2 xen-libs-4.7.3_03-43.9.1 xen-libs-4.9.0_11-3.9.1 xen-tools xen-tools-4.0.3_21548_18-53.5.1 xen-tools-4.11.0_08-1.11 xen-tools-4.12.1_06-1.1 xen-tools-4.2.5_21-45.5.1 xen-tools-4.2.5_21-47.7.1 xen-tools-4.4.4_22-22.51.2 xen-tools-4.4.4_22-61.9.2 xen-tools-4.7.3_03-43.9.1 xen-tools-4.9.0_11-3.9.1 xen-tools-domU xen-tools-domU-4.0.3_21548_18-53.5.1 xen-tools-domU-4.11.0_08-1.11 xen-tools-domU-4.12.1_06-1.1 xen-tools-domU-4.2.5_21-45.5.1 xen-tools-domU-4.2.5_21-47.7.1 xen-tools-domU-4.4.4_22-22.51.2 xen-tools-domU-4.4.4_22-61.9.2 xen-tools-domU-4.7.3_03-43.9.1 xen-tools-domU-4.9.0_11-3.9.1 xen-4.7.3_03-43.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 xen-libs-4.7.3_03-43.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 xen-libs-32bit-4.7.3_03-43.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP2 xen-4.9.0_11-3.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 xen-libs-4.9.0_11-3.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 xen-libs-32bit-4.9.0_11-3.9.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 xen-4.11.0_08-1.11 as a component of SUSE Linux Enterprise Desktop 12 SP4 xen-libs-4.11.0_08-1.11 as a component of SUSE Linux Enterprise Desktop 12 SP4 xen-libs-32bit-4.11.0_08-1.11 as a component of SUSE Linux Enterprise Desktop 12 SP4 xen-4.12.1_06-1.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 xen-doc-html-4.12.1_06-1.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 xen-libs-4.12.1_06-1.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 xen-libs-32bit-4.12.1_06-1.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 xen-tools-4.12.1_06-1.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 xen-tools-domU-4.12.1_06-1.1 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 xen-kmp-default-4.2.5_21_3.0.101_0.47.105-45.5.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 xen-kmp-pae-4.2.5_21_3.0.101_0.47.105-45.5.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 xen-libs-4.2.5_21-45.5.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 xen-tools-domU-4.2.5_21-45.5.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 xen-4.0.3_21548_18-53.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xen-doc-html-4.0.3_21548_18-53.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xen-doc-pdf-4.0.3_21548_18-53.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xen-kmp-default-4.0.3_21548_18_2.6.32.54_0.112.TDC-53.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xen-kmp-trace-4.0.3_21548_18_2.6.32.54_0.112.TDC-53.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xen-libs-4.0.3_21548_18-53.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xen-tools-4.0.3_21548_18-53.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xen-tools-domU-4.0.3_21548_18-53.5.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xen-4.2.5_21-45.5.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS xen-doc-html-4.2.5_21-45.5.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS xen-doc-pdf-4.2.5_21-45.5.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS xen-kmp-default-4.2.5_21_3.0.101_0.47.105-45.5.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS xen-kmp-pae-4.2.5_21_3.0.101_0.47.105-45.5.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS xen-libs-4.2.5_21-45.5.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS xen-libs-32bit-4.2.5_21-45.5.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS xen-tools-4.2.5_21-45.5.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS xen-tools-domU-4.2.5_21-45.5.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS xen-4.2.5_21-47.7.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA xen-doc-html-4.2.5_21-47.7.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA xen-doc-pdf-4.2.5_21-47.7.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA xen-kmp-default-4.2.5_21_3.0.101_0.125.TDC-47.7.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA xen-libs-4.2.5_21-47.7.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA xen-tools-4.2.5_21-47.7.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA xen-tools-domU-4.2.5_21-47.7.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA xen-4.4.4_22-61.9.2 as a component of SUSE Linux Enterprise Server 11 SP4 xen-doc-html-4.4.4_22-61.9.2 as a component of SUSE Linux Enterprise Server 11 SP4 xen-kmp-default-4.4.4_22_3.0.101_108.7-61.9.2 as a component of SUSE Linux Enterprise Server 11 SP4 xen-kmp-pae-4.4.4_22_3.0.101_108.7-61.9.2 as a component of SUSE Linux Enterprise Server 11 SP4 xen-libs-4.4.4_22-61.9.2 as a component of SUSE Linux Enterprise Server 11 SP4 xen-libs-32bit-4.4.4_22-61.9.2 as a component of SUSE Linux Enterprise Server 11 SP4 xen-tools-4.4.4_22-61.9.2 as a component of SUSE Linux Enterprise Server 11 SP4 xen-tools-domU-4.4.4_22-61.9.2 as a component of SUSE Linux Enterprise Server 11 SP4 xen-4.7.3_03-43.9.1 as a component of SUSE Linux Enterprise Server 12 SP2 xen-doc-html-4.7.3_03-43.9.1 as a component of SUSE Linux Enterprise Server 12 SP2 xen-libs-4.7.3_03-43.9.1 as a component of SUSE Linux Enterprise Server 12 SP2 xen-libs-32bit-4.7.3_03-43.9.1 as a component of SUSE Linux Enterprise Server 12 SP2 xen-tools-4.7.3_03-43.9.1 as a component of SUSE Linux Enterprise Server 12 SP2 xen-tools-domU-4.7.3_03-43.9.1 as a component of SUSE Linux Enterprise Server 12 SP2 xen-4.9.0_11-3.9.1 as a component of SUSE Linux Enterprise Server 12 SP3 xen-doc-html-4.9.0_11-3.9.1 as a component of SUSE Linux Enterprise Server 12 SP3 xen-libs-4.9.0_11-3.9.1 as a component of SUSE Linux Enterprise Server 12 SP3 xen-libs-32bit-4.9.0_11-3.9.1 as a component of SUSE Linux Enterprise Server 12 SP3 xen-tools-4.9.0_11-3.9.1 as a component of SUSE Linux Enterprise Server 12 SP3 xen-tools-domU-4.9.0_11-3.9.1 as a component of SUSE Linux Enterprise Server 12 SP3 xen-4.11.0_08-1.11 as a component of SUSE Linux Enterprise Server 12 SP4 xen-doc-html-4.11.0_08-1.11 as a component of SUSE Linux Enterprise Server 12 SP4 xen-libs-4.11.0_08-1.11 as a component of SUSE Linux Enterprise Server 12 SP4 xen-libs-32bit-4.11.0_08-1.11 as a component of SUSE Linux Enterprise Server 12 SP4 xen-tools-4.11.0_08-1.11 as a component of SUSE Linux Enterprise Server 12 SP4 xen-tools-domU-4.11.0_08-1.11 as a component of SUSE Linux Enterprise Server 12 SP4 xen-4.12.1_06-1.1 as a component of SUSE Linux Enterprise Server 12 SP5 xen-doc-html-4.12.1_06-1.1 as a component of SUSE Linux Enterprise Server 12 SP5 xen-libs-4.12.1_06-1.1 as a component of SUSE Linux Enterprise Server 12 SP5 xen-libs-32bit-4.12.1_06-1.1 as a component of SUSE Linux Enterprise Server 12 SP5 xen-tools-4.12.1_06-1.1 as a component of SUSE Linux Enterprise Server 12 SP5 xen-tools-domU-4.12.1_06-1.1 as a component of SUSE Linux Enterprise Server 12 SP5 xen-4.4.4_22-22.51.2 as a component of SUSE Linux Enterprise Server 12-LTSS xen-doc-html-4.4.4_22-22.51.2 as a component of SUSE Linux Enterprise Server 12-LTSS xen-kmp-default-4.4.4_22_k3.12.61_52.89-22.51.2 as a component of SUSE Linux Enterprise Server 12-LTSS xen-libs-4.4.4_22-22.51.2 as a component of SUSE Linux Enterprise Server 12-LTSS xen-libs-32bit-4.4.4_22-22.51.2 as a component of SUSE Linux Enterprise Server 12-LTSS xen-tools-4.4.4_22-22.51.2 as a component of SUSE Linux Enterprise Server 12-LTSS xen-tools-domU-4.4.4_22-22.51.2 as a component of SUSE Linux Enterprise Server 12-LTSS xen-4.4.4_22-61.9.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 xen-doc-html-4.4.4_22-61.9.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 xen-kmp-default-4.4.4_22_3.0.101_108.7-61.9.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 xen-kmp-pae-4.4.4_22_3.0.101_108.7-61.9.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 xen-libs-4.4.4_22-61.9.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 xen-libs-32bit-4.4.4_22-61.9.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 xen-tools-4.4.4_22-61.9.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 xen-tools-domU-4.4.4_22-61.9.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 xen-4.4.4_22-22.51.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-doc-html-4.4.4_22-22.51.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-kmp-default-4.4.4_22_k3.12.61_52.89-22.51.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-libs-4.4.4_22-22.51.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-libs-32bit-4.4.4_22-22.51.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-tools-4.4.4_22-22.51.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-tools-domU-4.4.4_22-22.51.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-4.7.3_03-43.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 xen-doc-html-4.7.3_03-43.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 xen-libs-4.7.3_03-43.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 xen-libs-32bit-4.7.3_03-43.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 xen-tools-4.7.3_03-43.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 xen-tools-domU-4.7.3_03-43.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 xen-4.9.0_11-3.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 xen-doc-html-4.9.0_11-3.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 xen-libs-4.9.0_11-3.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 xen-libs-32bit-4.9.0_11-3.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 xen-tools-4.9.0_11-3.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 xen-tools-domU-4.9.0_11-3.9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 xen-devel-4.4.4_22-61.9.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 xen-devel-4.7.3_03-43.9.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 xen-devel-4.9.0_11-3.9.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 xen-devel-4.11.0_08-1.11 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 xen-devel-4.12.1_06-1.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 xen as a component of HPE Helion OpenStack 8 xen-doc-html as a component of HPE Helion OpenStack 8 xen-libs as a component of HPE Helion OpenStack 8 xen-libs-32bit as a component of HPE Helion OpenStack 8 xen-tools as a component of HPE Helion OpenStack 8 xen-tools-domU as a component of HPE Helion OpenStack 8 xen as a component of SUSE Container as a Service Platform 2.0 xen as a component of SUSE Linux Enterprise Desktop 12 SP3 xen-libs as a component of SUSE Linux Enterprise Desktop 12 SP3 xen-libs-32bit as a component of SUSE Linux Enterprise Desktop 12 SP3 xen as a component of SUSE Linux Enterprise Server 11 SP4 LTSS xen as a component of SUSE Linux Enterprise Server 12 SP2-BCL xen-doc-html as a component of SUSE Linux Enterprise Server 12 SP2-BCL xen-libs as a component of SUSE Linux Enterprise Server 12 SP2-BCL xen-libs-32bit as a component of SUSE Linux Enterprise Server 12 SP2-BCL xen-tools as a component of SUSE Linux Enterprise Server 12 SP2-BCL xen-tools-domU as a component of SUSE Linux Enterprise Server 12 SP2-BCL xen as a component of SUSE Linux Enterprise Server 12 SP3 xen-doc-html as a component of SUSE Linux Enterprise Server 12 SP3 xen-libs as a component of SUSE Linux Enterprise Server 12 SP3 xen-libs-32bit as a component of SUSE Linux Enterprise Server 12 SP3 xen-tools as a component of SUSE Linux Enterprise Server 12 SP3 xen-tools-domU as a component of SUSE Linux Enterprise Server 12 SP3 xen as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS xen-doc-html as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS xen-libs as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS xen-libs-32bit as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS xen-tools as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS xen-tools-domU as a component of SUSE Linux Enterprise Server 12 SP4-ESPOS xen as a component of SUSE Linux Enterprise Server 12 SP4-LTSS xen-doc-html as a component of SUSE Linux Enterprise Server 12 SP4-LTSS xen-libs as a component of SUSE Linux Enterprise Server 12 SP4-LTSS xen-libs-32bit as a component of SUSE Linux Enterprise Server 12 SP4-LTSS xen-tools as a component of SUSE Linux Enterprise Server 12 SP4-LTSS xen-tools-domU as a component of SUSE Linux Enterprise Server 12 SP4-LTSS xen as a component of SUSE Linux Enterprise Server Teradata 12 SP3 xen as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xen-doc-html as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xen-libs as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xen-libs-32bit as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xen-tools as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xen-tools-domU as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xen-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 xen as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 xen as a component of SUSE OpenStack Cloud 8 xen-doc-html as a component of SUSE OpenStack Cloud 8 xen-libs as a component of SUSE OpenStack Cloud 8 xen-libs-32bit as a component of SUSE OpenStack Cloud 8 xen-tools as a component of SUSE OpenStack Cloud 8 xen-tools-domU as a component of SUSE OpenStack Cloud 8 xen as a component of SUSE OpenStack Cloud 9 xen-doc-html as a component of SUSE OpenStack Cloud 9 xen-libs as a component of SUSE OpenStack Cloud 9 xen-libs-32bit as a component of SUSE OpenStack Cloud 9 xen-tools as a component of SUSE OpenStack Cloud 9 xen-tools-domU as a component of SUSE OpenStack Cloud 9 xen as a component of SUSE OpenStack Cloud Crowbar 8 xen-doc-html as a component of SUSE OpenStack Cloud Crowbar 8 xen-libs as a component of SUSE OpenStack Cloud Crowbar 8 xen-libs-32bit as a component of SUSE OpenStack Cloud Crowbar 8 xen-tools as a component of SUSE OpenStack Cloud Crowbar 8 xen-tools-domU as a component of SUSE OpenStack Cloud Crowbar 8 xen as a component of SUSE OpenStack Cloud Crowbar 9 xen-doc-html as a component of SUSE OpenStack Cloud Crowbar 9 xen-libs as a component of SUSE OpenStack Cloud Crowbar 9 xen-libs-32bit as a component of SUSE OpenStack Cloud Crowbar 9 xen-tools as a component of SUSE OpenStack Cloud Crowbar 9 xen-tools-domU as a component of SUSE OpenStack Cloud Crowbar 9 Xen maintains the _GTF_{read,writ}ing bits as appropriate, to inform the guest that a grant is in use. A guest is expected not to modify the grant details while it is in use, whereas the guest is free to modify/reuse the grant entry when it is not in use. Under some circumstances, Xen will clear the status bits too early, incorrectly informing the guest that the grant is no longer in use. A guest may prematurely believe that a granted frame is safely private again, and reuse it in a way which contains sensitive information, while the domain on the far end of the grant is still using the grant. Xen 4.9, 4.8, 4.7, 4.6, and 4.5 are affected. CVE-2017-12855 SUSE Linux Enterprise Desktop 12 SP2:xen-4.7.3_03-43.9.1 SUSE Linux Enterprise Desktop 12 SP2:xen-libs-4.7.3_03-43.9.1 SUSE Linux Enterprise Desktop 12 SP2:xen-libs-32bit-4.7.3_03-43.9.1 SUSE Linux Enterprise Desktop 12 SP3:xen-4.9.0_11-3.9.1 SUSE Linux Enterprise Desktop 12 SP3:xen-libs-4.9.0_11-3.9.1 SUSE Linux Enterprise Desktop 12 SP3:xen-libs-32bit-4.9.0_11-3.9.1 SUSE Linux Enterprise Desktop 12 SP4:xen-4.11.0_08-1.11 SUSE Linux Enterprise Desktop 12 SP4:xen-libs-4.11.0_08-1.11 SUSE Linux Enterprise Desktop 12 SP4:xen-libs-32bit-4.11.0_08-1.11 SUSE Linux Enterprise High Performance Computing 12 SP5:xen-4.12.1_06-1.1 SUSE Linux Enterprise High Performance Computing 12 SP5:xen-doc-html-4.12.1_06-1.1 SUSE Linux Enterprise High Performance Computing 12 SP5:xen-libs-4.12.1_06-1.1 SUSE Linux Enterprise High Performance Computing 12 SP5:xen-libs-32bit-4.12.1_06-1.1 SUSE Linux Enterprise High Performance Computing 12 SP5:xen-tools-4.12.1_06-1.1 SUSE Linux Enterprise High Performance Computing 12 SP5:xen-tools-domU-4.12.1_06-1.1 SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.105-45.5.1 SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.105-45.5.1 SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-45.5.1 SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-45.5.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xen-4.0.3_21548_18-53.5.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xen-doc-html-4.0.3_21548_18-53.5.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xen-doc-pdf-4.0.3_21548_18-53.5.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xen-kmp-default-4.0.3_21548_18_2.6.32.54_0.112.TDC-53.5.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xen-kmp-trace-4.0.3_21548_18_2.6.32.54_0.112.TDC-53.5.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xen-libs-4.0.3_21548_18-53.5.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xen-tools-4.0.3_21548_18-53.5.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xen-tools-domU-4.0.3_21548_18-53.5.1 SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-45.5.1 SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-45.5.1 SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-45.5.1 SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.105-45.5.1 SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.105-45.5.1 SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-45.5.1 SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-45.5.1 SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-45.5.1 SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-45.5.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:xen-4.2.5_21-47.7.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:xen-doc-html-4.2.5_21-47.7.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:xen-doc-pdf-4.2.5_21-47.7.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:xen-kmp-default-4.2.5_21_3.0.101_0.125.TDC-47.7.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:xen-libs-4.2.5_21-47.7.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:xen-tools-4.2.5_21-47.7.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:xen-tools-domU-4.2.5_21-47.7.1 SUSE Linux Enterprise Server 11 SP4:xen-4.4.4_22-61.9.2 SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.4_22-61.9.2 SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.4_22_3.0.101_108.7-61.9.2 SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.4_22_3.0.101_108.7-61.9.2 SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.4_22-61.9.2 SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.4_22-61.9.2 SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.4_22-61.9.2 SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.4_22-61.9.2 SUSE Linux Enterprise Server 12 SP2:xen-4.7.3_03-43.9.1 SUSE Linux Enterprise Server 12 SP2:xen-doc-html-4.7.3_03-43.9.1 SUSE Linux Enterprise Server 12 SP2:xen-libs-4.7.3_03-43.9.1 SUSE Linux Enterprise Server 12 SP2:xen-libs-32bit-4.7.3_03-43.9.1 SUSE Linux Enterprise Server 12 SP2:xen-tools-4.7.3_03-43.9.1 SUSE Linux Enterprise Server 12 SP2:xen-tools-domU-4.7.3_03-43.9.1 SUSE Linux Enterprise Server 12 SP3:xen-4.9.0_11-3.9.1 SUSE Linux Enterprise Server 12 SP3:xen-doc-html-4.9.0_11-3.9.1 SUSE Linux Enterprise Server 12 SP3:xen-libs-4.9.0_11-3.9.1 SUSE Linux Enterprise Server 12 SP3:xen-libs-32bit-4.9.0_11-3.9.1 SUSE Linux Enterprise Server 12 SP3:xen-tools-4.9.0_11-3.9.1 SUSE Linux Enterprise Server 12 SP3:xen-tools-domU-4.9.0_11-3.9.1 SUSE Linux Enterprise Server 12 SP4:xen-4.11.0_08-1.11 SUSE Linux Enterprise Server 12 SP4:xen-doc-html-4.11.0_08-1.11 SUSE Linux Enterprise Server 12 SP4:xen-libs-4.11.0_08-1.11 SUSE Linux Enterprise Server 12 SP4:xen-libs-32bit-4.11.0_08-1.11 SUSE Linux Enterprise Server 12 SP4:xen-tools-4.11.0_08-1.11 SUSE Linux Enterprise Server 12 SP4:xen-tools-domU-4.11.0_08-1.11 SUSE Linux Enterprise Server 12 SP5:xen-4.12.1_06-1.1 SUSE Linux Enterprise Server 12 SP5:xen-doc-html-4.12.1_06-1.1 SUSE Linux Enterprise Server 12 SP5:xen-libs-4.12.1_06-1.1 SUSE Linux Enterprise Server 12 SP5:xen-libs-32bit-4.12.1_06-1.1 SUSE Linux Enterprise Server 12 SP5:xen-tools-4.12.1_06-1.1 SUSE Linux Enterprise Server 12 SP5:xen-tools-domU-4.12.1_06-1.1 SUSE Linux Enterprise Server 12-LTSS:xen-4.4.4_22-22.51.2 SUSE Linux Enterprise Server 12-LTSS:xen-doc-html-4.4.4_22-22.51.2 SUSE Linux Enterprise Server 12-LTSS:xen-kmp-default-4.4.4_22_k3.12.61_52.89-22.51.2 SUSE Linux Enterprise Server 12-LTSS:xen-libs-4.4.4_22-22.51.2 SUSE Linux Enterprise Server 12-LTSS:xen-libs-32bit-4.4.4_22-22.51.2 SUSE Linux Enterprise Server 12-LTSS:xen-tools-4.4.4_22-22.51.2 SUSE Linux Enterprise Server 12-LTSS:xen-tools-domU-4.4.4_22-22.51.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.4_22-61.9.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.4_22-61.9.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.4_22_3.0.101_108.7-61.9.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.4_22_3.0.101_108.7-61.9.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.4_22-61.9.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.4_22-61.9.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.4_22-61.9.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.4_22-61.9.2 SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.4_22-22.51.2 SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.4_22-22.51.2 SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.4_22_k3.12.61_52.89-22.51.2 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.4_22-22.51.2 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.4_22-22.51.2 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.4_22-22.51.2 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.4_22-22.51.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-4.7.3_03-43.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-doc-html-4.7.3_03-43.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-libs-4.7.3_03-43.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-libs-32bit-4.7.3_03-43.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-tools-4.7.3_03-43.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-tools-domU-4.7.3_03-43.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-4.9.0_11-3.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-doc-html-4.9.0_11-3.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-4.9.0_11-3.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-32bit-4.9.0_11-3.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-4.9.0_11-3.9.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-domU-4.9.0_11-3.9.1 SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.4_22-61.9.2 SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel-4.7.3_03-43.9.1 SUSE Linux Enterprise Software Development Kit 12 SP3:xen-devel-4.9.0_11-3.9.1 SUSE Linux Enterprise Software Development Kit 12 SP4:xen-devel-4.11.0_08-1.11 SUSE Linux Enterprise Software Development Kit 12 SP5:xen-devel-4.12.1_06-1.1 SUSE Container as a Service Platform 2.0:xen SUSE Linux Enterprise Desktop 12 SP3:xen SUSE Linux Enterprise Desktop 12 SP3:xen-libs SUSE Linux Enterprise Desktop 12 SP3:xen-libs-32bit SUSE Linux Enterprise Server 12 SP3:xen SUSE Linux Enterprise Server 12 SP3:xen-doc-html SUSE Linux Enterprise Server 12 SP3:xen-libs SUSE Linux Enterprise Server 12 SP3:xen-libs-32bit SUSE Linux Enterprise Server 12 SP3:xen-tools SUSE Linux Enterprise Server 12 SP3:xen-tools-domU SUSE Linux Enterprise Server 12 SP4-ESPOS:xen SUSE Linux Enterprise Server 12 SP4-ESPOS:xen-doc-html SUSE Linux Enterprise Server 12 SP4-ESPOS:xen-libs SUSE Linux Enterprise Server 12 SP4-ESPOS:xen-libs-32bit SUSE Linux Enterprise Server 12 SP4-ESPOS:xen-tools SUSE Linux Enterprise Server 12 SP4-ESPOS:xen-tools-domU SUSE Linux Enterprise Server 12 SP4-LTSS:xen SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU SUSE Linux Enterprise Software Development Kit 12 SP3:xen SUSE Linux Enterprise Software Development Kit 12 SP3:xen-devel SUSE OpenStack Cloud 9:xen SUSE OpenStack Cloud 9:xen-doc-html SUSE OpenStack Cloud 9:xen-libs SUSE OpenStack Cloud 9:xen-libs-32bit SUSE OpenStack Cloud 9:xen-tools SUSE OpenStack Cloud 9:xen-tools-domU SUSE OpenStack Cloud Crowbar 9:xen SUSE OpenStack Cloud Crowbar 9:xen-doc-html SUSE OpenStack Cloud Crowbar 9:xen-libs SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit SUSE OpenStack Cloud Crowbar 9:xen-tools SUSE OpenStack Cloud Crowbar 9:xen-tools-domU HPE Helion OpenStack 8:xen HPE Helion OpenStack 8:xen-doc-html HPE Helion OpenStack 8:xen-libs HPE Helion OpenStack 8:xen-libs-32bit HPE Helion OpenStack 8:xen-tools HPE Helion OpenStack 8:xen-tools-domU SUSE Linux Enterprise Server 11 SP4 LTSS:xen SUSE Linux Enterprise Server 12 SP2-BCL:xen SUSE Linux Enterprise Server 12 SP2-BCL:xen-doc-html SUSE Linux Enterprise Server 12 SP2-BCL:xen-libs SUSE Linux Enterprise Server 12 SP2-BCL:xen-libs-32bit SUSE Linux Enterprise Server 12 SP2-BCL:xen-tools SUSE Linux Enterprise Server 12 SP2-BCL:xen-tools-domU SUSE Linux Enterprise Server Teradata 12 SP3:xen SUSE OpenStack Cloud 8:xen SUSE OpenStack Cloud 8:xen-doc-html SUSE OpenStack Cloud 8:xen-libs SUSE OpenStack Cloud 8:xen-libs-32bit SUSE OpenStack Cloud 8:xen-tools SUSE OpenStack Cloud 8:xen-tools-domU SUSE OpenStack Cloud Crowbar 8:xen SUSE OpenStack Cloud Crowbar 8:xen-doc-html SUSE OpenStack Cloud Crowbar 8:xen-libs SUSE OpenStack Cloud Crowbar 8:xen-libs-32bit SUSE OpenStack Cloud Crowbar 8:xen-tools SUSE OpenStack Cloud Crowbar 8:xen-tools-domU moderate 2.1 AV:L/AC:L/Au:N/C:P/I:N/A:N 6.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N