CVE-2017-7995 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-7995 Interim 1 31 2025-11-05T04:00:24Z current 2021-05-30T13:55:52Z 2025-11-05T04:00:24Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-7995 Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure. This is an error in the get_user function. NOTE: the upstream Xen Project considers versions before 4.5.x to be EOL. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2017-May/002837.html E-Mail link for SUSE-SU-2017:1146-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Point of Sale 11 SP3 SUSE Linux Enterprise Server 11 SP1-TERADATA SUSE Linux Enterprise Server 11 SP3-LTSS SUSE Linux Enterprise Server 11 SP3-TERADATA SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server 12-LTSS SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Manager 2.1 SUSE Manager Proxy 2.1 SUSE OpenStack Cloud 5 xen xen-4.0.3_21548_18-52.1 xen-4.2.5_21-41.1 xen-4.2.5_21-43.1 xen-devel xen-doc-html xen-doc-html-4.0.3_21548_18-52.1 xen-doc-html-4.2.5_21-41.1 xen-doc-html-4.2.5_21-43.1 xen-doc-pdf-4.0.3_21548_18-52.1 xen-doc-pdf-4.2.5_21-41.1 xen-doc-pdf-4.2.5_21-43.1 xen-kmp-default xen-kmp-default-4.0.3_21548_18_2.6.32.54_0.103.TDC-52.1 xen-kmp-default-4.2.5_21_3.0.101_0.119.TDC-43.1 xen-kmp-default-4.2.5_21_3.0.101_0.47.99-41.1 xen-kmp-pae xen-kmp-pae-4.2.5_21_3.0.101_0.47.99-41.1 xen-kmp-trace-4.0.3_21548_18_2.6.32.54_0.103.TDC-52.1 xen-libs xen-libs-32bit xen-libs-32bit-4.2.5_21-41.1 xen-libs-4.0.3_21548_18-52.1 xen-libs-4.2.5_21-41.1 xen-libs-4.2.5_21-43.1 xen-tools xen-tools-4.0.3_21548_18-52.1 xen-tools-4.2.5_21-41.1 xen-tools-4.2.5_21-43.1 xen-tools-domU xen-tools-domU-4.0.3_21548_18-52.1 xen-tools-domU-4.2.5_21-41.1 xen-tools-domU-4.2.5_21-43.1 xen-kmp-default-4.2.5_21_3.0.101_0.47.99-41.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 xen-kmp-pae-4.2.5_21_3.0.101_0.47.99-41.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 xen-libs-4.2.5_21-41.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 xen-tools-domU-4.2.5_21-41.1 as a component of SUSE Linux Enterprise Point of Sale 11 SP3 xen-4.0.3_21548_18-52.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xen-doc-html-4.0.3_21548_18-52.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xen-doc-pdf-4.0.3_21548_18-52.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xen-kmp-default-4.0.3_21548_18_2.6.32.54_0.103.TDC-52.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xen-kmp-trace-4.0.3_21548_18_2.6.32.54_0.103.TDC-52.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xen-libs-4.0.3_21548_18-52.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xen-tools-4.0.3_21548_18-52.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xen-tools-domU-4.0.3_21548_18-52.1 as a component of SUSE Linux Enterprise Server 11 SP1-TERADATA xen-4.2.5_21-41.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS xen-doc-html-4.2.5_21-41.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS xen-doc-pdf-4.2.5_21-41.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS xen-kmp-default-4.2.5_21_3.0.101_0.47.99-41.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS xen-kmp-pae-4.2.5_21_3.0.101_0.47.99-41.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS xen-libs-4.2.5_21-41.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS xen-libs-32bit-4.2.5_21-41.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS xen-tools-4.2.5_21-41.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS xen-tools-domU-4.2.5_21-41.1 as a component of SUSE Linux Enterprise Server 11 SP3-LTSS xen-4.2.5_21-43.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA xen-doc-html-4.2.5_21-43.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA xen-doc-pdf-4.2.5_21-43.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA xen-kmp-default-4.2.5_21_3.0.101_0.119.TDC-43.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA xen-libs-4.2.5_21-43.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA xen-tools-4.2.5_21-43.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA xen-tools-domU-4.2.5_21-43.1 as a component of SUSE Linux Enterprise Server 11 SP3-TERADATA xen-4.2.5_21-41.1 as a component of SUSE Manager 2.1 xen-doc-html-4.2.5_21-41.1 as a component of SUSE Manager 2.1 xen-doc-pdf-4.2.5_21-41.1 as a component of SUSE Manager 2.1 xen-kmp-default-4.2.5_21_3.0.101_0.47.99-41.1 as a component of SUSE Manager 2.1 xen-libs-4.2.5_21-41.1 as a component of SUSE Manager 2.1 xen-libs-32bit-4.2.5_21-41.1 as a component of SUSE Manager 2.1 xen-tools-4.2.5_21-41.1 as a component of SUSE Manager 2.1 xen-tools-domU-4.2.5_21-41.1 as a component of SUSE Manager 2.1 xen-4.2.5_21-41.1 as a component of SUSE Manager Proxy 2.1 xen-doc-html-4.2.5_21-41.1 as a component of SUSE Manager Proxy 2.1 xen-doc-pdf-4.2.5_21-41.1 as a component of SUSE Manager Proxy 2.1 xen-kmp-default-4.2.5_21_3.0.101_0.47.99-41.1 as a component of SUSE Manager Proxy 2.1 xen-libs-4.2.5_21-41.1 as a component of SUSE Manager Proxy 2.1 xen-libs-32bit-4.2.5_21-41.1 as a component of SUSE Manager Proxy 2.1 xen-tools-4.2.5_21-41.1 as a component of SUSE Manager Proxy 2.1 xen-tools-domU-4.2.5_21-41.1 as a component of SUSE Manager Proxy 2.1 xen-4.2.5_21-41.1 as a component of SUSE OpenStack Cloud 5 xen-doc-html-4.2.5_21-41.1 as a component of SUSE OpenStack Cloud 5 xen-doc-pdf-4.2.5_21-41.1 as a component of SUSE OpenStack Cloud 5 xen-kmp-default-4.2.5_21_3.0.101_0.47.99-41.1 as a component of SUSE OpenStack Cloud 5 xen-libs-4.2.5_21-41.1 as a component of SUSE OpenStack Cloud 5 xen-libs-32bit-4.2.5_21-41.1 as a component of SUSE OpenStack Cloud 5 xen-tools-4.2.5_21-41.1 as a component of SUSE OpenStack Cloud 5 xen-tools-domU-4.2.5_21-41.1 as a component of SUSE OpenStack Cloud 5 xen as a component of SUSE Linux Enterprise Desktop 12 SP1 xen-kmp-default as a component of SUSE Linux Enterprise Desktop 12 SP1 xen-libs as a component of SUSE Linux Enterprise Desktop 12 SP1 xen-libs-32bit as a component of SUSE Linux Enterprise Desktop 12 SP1 xen as a component of SUSE Linux Enterprise Server 11 SP4-LTSS xen-doc-html as a component of SUSE Linux Enterprise Server 11 SP4-LTSS xen-kmp-default as a component of SUSE Linux Enterprise Server 11 SP4-LTSS xen-kmp-pae as a component of SUSE Linux Enterprise Server 11 SP4-LTSS xen-libs as a component of SUSE Linux Enterprise Server 11 SP4-LTSS xen-libs-32bit as a component of SUSE Linux Enterprise Server 11 SP4-LTSS xen-tools as a component of SUSE Linux Enterprise Server 11 SP4-LTSS xen-tools-domU as a component of SUSE Linux Enterprise Server 11 SP4-LTSS xen as a component of SUSE Linux Enterprise Server 12 SP1 xen-doc-html as a component of SUSE Linux Enterprise Server 12 SP1 xen-kmp-default as a component of SUSE Linux Enterprise Server 12 SP1 xen-libs as a component of SUSE Linux Enterprise Server 12 SP1 xen-libs-32bit as a component of SUSE Linux Enterprise Server 12 SP1 xen-tools as a component of SUSE Linux Enterprise Server 12 SP1 xen-tools-domU as a component of SUSE Linux Enterprise Server 12 SP1 xen as a component of SUSE Linux Enterprise Server 12 SP2 xen-doc-html as a component of SUSE Linux Enterprise Server 12 SP2 xen-libs as a component of SUSE Linux Enterprise Server 12 SP2 xen-libs-32bit as a component of SUSE Linux Enterprise Server 12 SP2 xen-tools as a component of SUSE Linux Enterprise Server 12 SP2 xen-tools-domU as a component of SUSE Linux Enterprise Server 12 SP2 xen as a component of SUSE Linux Enterprise Server 12-LTSS xen-doc-html as a component of SUSE Linux Enterprise Server 12-LTSS xen-kmp-default as a component of SUSE Linux Enterprise Server 12-LTSS xen-libs as a component of SUSE Linux Enterprise Server 12-LTSS xen-libs-32bit as a component of SUSE Linux Enterprise Server 12-LTSS xen-tools as a component of SUSE Linux Enterprise Server 12-LTSS xen-tools-domU as a component of SUSE Linux Enterprise Server 12-LTSS xen-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 xen as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 xen-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 xen as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 xen-devel as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 xen as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 Xen PV guest before Xen 4.3 checked access permissions to MMIO ranges only after accessing them, allowing host PCI device space memory reads, leading to information disclosure. This is an error in the get_user function. NOTE: the upstream Xen Project considers versions before 4.5.x to be EOL. CVE-2017-7995 SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-default-4.2.5_21_3.0.101_0.47.99-41.1 SUSE Linux Enterprise Point of Sale 11 SP3:xen-kmp-pae-4.2.5_21_3.0.101_0.47.99-41.1 SUSE Linux Enterprise Point of Sale 11 SP3:xen-libs-4.2.5_21-41.1 SUSE Linux Enterprise Point of Sale 11 SP3:xen-tools-domU-4.2.5_21-41.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xen-4.0.3_21548_18-52.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xen-doc-html-4.0.3_21548_18-52.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xen-doc-pdf-4.0.3_21548_18-52.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xen-kmp-default-4.0.3_21548_18_2.6.32.54_0.103.TDC-52.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xen-kmp-trace-4.0.3_21548_18_2.6.32.54_0.103.TDC-52.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xen-libs-4.0.3_21548_18-52.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xen-tools-4.0.3_21548_18-52.1 SUSE Linux Enterprise Server 11 SP1-TERADATA:xen-tools-domU-4.0.3_21548_18-52.1 SUSE Linux Enterprise Server 11 SP3-LTSS:xen-4.2.5_21-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-html-4.2.5_21-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:xen-doc-pdf-4.2.5_21-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-default-4.2.5_21_3.0.101_0.47.99-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:xen-kmp-pae-4.2.5_21_3.0.101_0.47.99-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-4.2.5_21-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:xen-libs-32bit-4.2.5_21-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-4.2.5_21-41.1 SUSE Linux Enterprise Server 11 SP3-LTSS:xen-tools-domU-4.2.5_21-41.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:xen-4.2.5_21-43.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:xen-doc-html-4.2.5_21-43.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:xen-doc-pdf-4.2.5_21-43.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:xen-kmp-default-4.2.5_21_3.0.101_0.119.TDC-43.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:xen-libs-4.2.5_21-43.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:xen-tools-4.2.5_21-43.1 SUSE Linux Enterprise Server 11 SP3-TERADATA:xen-tools-domU-4.2.5_21-43.1 SUSE Manager 2.1:xen-4.2.5_21-41.1 SUSE Manager 2.1:xen-doc-html-4.2.5_21-41.1 SUSE Manager 2.1:xen-doc-pdf-4.2.5_21-41.1 SUSE Manager 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.99-41.1 SUSE Manager 2.1:xen-libs-4.2.5_21-41.1 SUSE Manager 2.1:xen-libs-32bit-4.2.5_21-41.1 SUSE Manager 2.1:xen-tools-4.2.5_21-41.1 SUSE Manager 2.1:xen-tools-domU-4.2.5_21-41.1 SUSE Manager Proxy 2.1:xen-4.2.5_21-41.1 SUSE Manager Proxy 2.1:xen-doc-html-4.2.5_21-41.1 SUSE Manager Proxy 2.1:xen-doc-pdf-4.2.5_21-41.1 SUSE Manager Proxy 2.1:xen-kmp-default-4.2.5_21_3.0.101_0.47.99-41.1 SUSE Manager Proxy 2.1:xen-libs-4.2.5_21-41.1 SUSE Manager Proxy 2.1:xen-libs-32bit-4.2.5_21-41.1 SUSE Manager Proxy 2.1:xen-tools-4.2.5_21-41.1 SUSE Manager Proxy 2.1:xen-tools-domU-4.2.5_21-41.1 SUSE OpenStack Cloud 5:xen-4.2.5_21-41.1 SUSE OpenStack Cloud 5:xen-doc-html-4.2.5_21-41.1 SUSE OpenStack Cloud 5:xen-doc-pdf-4.2.5_21-41.1 SUSE OpenStack Cloud 5:xen-kmp-default-4.2.5_21_3.0.101_0.47.99-41.1 SUSE OpenStack Cloud 5:xen-libs-4.2.5_21-41.1 SUSE OpenStack Cloud 5:xen-libs-32bit-4.2.5_21-41.1 SUSE OpenStack Cloud 5:xen-tools-4.2.5_21-41.1 SUSE OpenStack Cloud 5:xen-tools-domU-4.2.5_21-41.1 SUSE Linux Enterprise Desktop 12 SP1:xen SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default SUSE Linux Enterprise Desktop 12 SP1:xen-libs SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit SUSE Linux Enterprise Server 11 SP4-LTSS:xen SUSE Linux Enterprise Server 11 SP4-LTSS:xen-doc-html SUSE Linux Enterprise Server 11 SP4-LTSS:xen-kmp-default SUSE Linux Enterprise Server 11 SP4-LTSS:xen-kmp-pae SUSE Linux Enterprise Server 11 SP4-LTSS:xen-libs SUSE Linux Enterprise Server 11 SP4-LTSS:xen-libs-32bit SUSE Linux Enterprise Server 11 SP4-LTSS:xen-tools SUSE Linux Enterprise Server 11 SP4-LTSS:xen-tools-domU SUSE Linux Enterprise Server 12 SP1:xen SUSE Linux Enterprise Server 12 SP1:xen-doc-html SUSE Linux Enterprise Server 12 SP1:xen-kmp-default SUSE Linux Enterprise Server 12 SP1:xen-libs SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit SUSE Linux Enterprise Server 12 SP1:xen-tools SUSE Linux Enterprise Server 12 SP1:xen-tools-domU SUSE Linux Enterprise Server 12 SP2:xen SUSE Linux Enterprise Server 12 SP2:xen-doc-html SUSE Linux Enterprise Server 12 SP2:xen-libs SUSE Linux Enterprise Server 12 SP2:xen-libs-32bit SUSE Linux Enterprise Server 12 SP2:xen-tools SUSE Linux Enterprise Server 12 SP2:xen-tools-domU SUSE Linux Enterprise Server 12-LTSS:xen SUSE Linux Enterprise Server 12-LTSS:xen-doc-html SUSE Linux Enterprise Server 12-LTSS:xen-kmp-default SUSE Linux Enterprise Server 12-LTSS:xen-libs SUSE Linux Enterprise Server 12-LTSS:xen-libs-32bit SUSE Linux Enterprise Server 12-LTSS:xen-tools SUSE Linux Enterprise Server 12-LTSS:xen-tools-domU SUSE Linux Enterprise Software Development Kit 11 SP4:xen SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel SUSE Linux Enterprise Software Development Kit 12 SP1:xen SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel SUSE Linux Enterprise Software Development Kit 12 SP2:xen SUSE Linux Enterprise Software Development Kit 12 SP2:xen-devel low 3.5 AV:L/AC:H/Au:S/C:P/I:P/A:P 3.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N