CVE-2015-2152 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2015-2152 Interim 1 26 2023-05-13T00:52:02Z current 2021-05-30T13:28:14Z 2023-05-13T00:52:02Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2015-2152 Xen 4.5.x and earlier enables certain default backends when emulating a VGA device for an x86 HVM guest qemu even when the configuration disables them, which allows local guest users to obtain access to the VGA console by (1) setting the DISPLAY environment variable, when compiled with SDL support, or connecting to the VNC server on (2) ::1 or (3) 127.0.0.1, when not compiled with SDL support. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/opensuse-security-announce/2015-03/msg00031.html E-Mail link for SUSE-SU-2015:0613-1 https://lists.opensuse.org/opensuse-security-announce/2015-04/msg00014.html E-Mail link for openSUSE-SU-2015:0732-1 https://lists.opensuse.org/opensuse-security-announce/2015-06/msg00016.html E-Mail link for openSUSE-SU-2015:1092-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Server 11 SP1 for Teradata SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 11 SP4 LTSS SUSE Linux Enterprise Server 11 SP4-LTSS SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 xen xen-4.4.1_10-9.1 xen-4.5.1_12-2.3 xen-devel xen-devel-4.4.1_10-9.1 xen-devel-4.5.1_12-2.3 xen-doc-html xen-doc-html-4.4.1_10-9.1 xen-doc-html-4.5.1_12-2.3 xen-kmp-default xen-kmp-default-4.4.1_10_k3.12.36_38-9.1 xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 xen-kmp-pae xen-libs xen-libs-32bit xen-libs-32bit-4.4.1_10-9.1 xen-libs-32bit-4.5.1_12-2.3 xen-libs-4.4.1_10-9.1 xen-libs-4.5.1_12-2.3 xen-tools xen-tools-4.4.1_10-9.1 xen-tools-4.5.1_12-2.3 xen-tools-domU xen-tools-domU-4.4.1_10-9.1 xen-tools-domU-4.5.1_12-2.3 xen-4.4.1_10-9.1 as a component of SUSE Linux Enterprise Desktop 12 xen-kmp-default-4.4.1_10_k3.12.36_38-9.1 as a component of SUSE Linux Enterprise Desktop 12 xen-libs-4.4.1_10-9.1 as a component of SUSE Linux Enterprise Desktop 12 xen-libs-32bit-4.4.1_10-9.1 as a component of SUSE Linux Enterprise Desktop 12 xen-4.5.1_12-2.3 as a component of SUSE Linux Enterprise Desktop 12 SP1 xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 as a component of SUSE Linux Enterprise Desktop 12 SP1 xen-libs-4.5.1_12-2.3 as a component of SUSE Linux Enterprise Desktop 12 SP1 xen-libs-32bit-4.5.1_12-2.3 as a component of SUSE Linux Enterprise Desktop 12 SP1 xen-4.4.1_10-9.1 as a component of SUSE Linux Enterprise Server 12 xen-doc-html-4.4.1_10-9.1 as a component of SUSE Linux Enterprise Server 12 xen-kmp-default-4.4.1_10_k3.12.36_38-9.1 as a component of SUSE Linux Enterprise Server 12 xen-libs-4.4.1_10-9.1 as a component of SUSE Linux Enterprise Server 12 xen-libs-32bit-4.4.1_10-9.1 as a component of SUSE Linux Enterprise Server 12 xen-tools-4.4.1_10-9.1 as a component of SUSE Linux Enterprise Server 12 xen-tools-domU-4.4.1_10-9.1 as a component of SUSE Linux Enterprise Server 12 xen-4.5.1_12-2.3 as a component of SUSE Linux Enterprise Server 12 SP1 xen-doc-html-4.5.1_12-2.3 as a component of SUSE Linux Enterprise Server 12 SP1 xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 as a component of SUSE Linux Enterprise Server 12 SP1 xen-libs-4.5.1_12-2.3 as a component of SUSE Linux Enterprise Server 12 SP1 xen-libs-32bit-4.5.1_12-2.3 as a component of SUSE Linux Enterprise Server 12 SP1 xen-tools-4.5.1_12-2.3 as a component of SUSE Linux Enterprise Server 12 SP1 xen-tools-domU-4.5.1_12-2.3 as a component of SUSE Linux Enterprise Server 12 SP1 xen-4.4.1_10-9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-doc-html-4.4.1_10-9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-kmp-default-4.4.1_10_k3.12.36_38-9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-libs-4.4.1_10-9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-libs-32bit-4.4.1_10-9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-tools-4.4.1_10-9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-tools-domU-4.4.1_10-9.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 xen-devel-4.4.1_10-9.1 as a component of SUSE Linux Enterprise Software Development Kit 12 xen-devel-4.5.1_12-2.3 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 xen as a component of SUSE Linux Enterprise Desktop 11 SP4 xen as a component of SUSE Linux Enterprise Server 11 SP1 for Teradata xen as a component of SUSE Linux Enterprise Server 11 SP4 LTSS xen as a component of SUSE Linux Enterprise Server 11 SP4-LTSS xen-doc-html as a component of SUSE Linux Enterprise Server 11 SP4-LTSS xen-kmp-default as a component of SUSE Linux Enterprise Server 11 SP4-LTSS xen-kmp-pae as a component of SUSE Linux Enterprise Server 11 SP4-LTSS xen-libs as a component of SUSE Linux Enterprise Server 11 SP4-LTSS xen-libs-32bit as a component of SUSE Linux Enterprise Server 11 SP4-LTSS xen-tools as a component of SUSE Linux Enterprise Server 11 SP4-LTSS xen-tools-domU as a component of SUSE Linux Enterprise Server 11 SP4-LTSS xen-devel as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 xen as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 Xen 4.5.x and earlier enables certain default backends when emulating a VGA device for an x86 HVM guest qemu even when the configuration disables them, which allows local guest users to obtain access to the VGA console by (1) setting the DISPLAY environment variable, when compiled with SDL support, or connecting to the VNC server on (2) ::1 or (3) 127.0.0.1, when not compiled with SDL support. CVE-2015-2152 SUSE Linux Enterprise Desktop 12:xen-4.4.1_10-9.1 SUSE Linux Enterprise Desktop 12:xen-kmp-default-4.4.1_10_k3.12.36_38-9.1 SUSE Linux Enterprise Desktop 12:xen-libs-4.4.1_10-9.1 SUSE Linux Enterprise Desktop 12:xen-libs-32bit-4.4.1_10-9.1 SUSE Linux Enterprise Desktop 12 SP1:xen-4.5.1_12-2.3 SUSE Linux Enterprise Desktop 12 SP1:xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 SUSE Linux Enterprise Desktop 12 SP1:xen-libs-4.5.1_12-2.3 SUSE Linux Enterprise Desktop 12 SP1:xen-libs-32bit-4.5.1_12-2.3 SUSE Linux Enterprise Server 12:xen-4.4.1_10-9.1 SUSE Linux Enterprise Server 12:xen-doc-html-4.4.1_10-9.1 SUSE Linux Enterprise Server 12:xen-kmp-default-4.4.1_10_k3.12.36_38-9.1 SUSE Linux Enterprise Server 12:xen-libs-4.4.1_10-9.1 SUSE Linux Enterprise Server 12:xen-libs-32bit-4.4.1_10-9.1 SUSE Linux Enterprise Server 12:xen-tools-4.4.1_10-9.1 SUSE Linux Enterprise Server 12:xen-tools-domU-4.4.1_10-9.1 SUSE Linux Enterprise Server 12 SP1:xen-4.5.1_12-2.3 SUSE Linux Enterprise Server 12 SP1:xen-doc-html-4.5.1_12-2.3 SUSE Linux Enterprise Server 12 SP1:xen-kmp-default-4.5.1_12_k3.12.49_11-2.3 SUSE Linux Enterprise Server 12 SP1:xen-libs-4.5.1_12-2.3 SUSE Linux Enterprise Server 12 SP1:xen-libs-32bit-4.5.1_12-2.3 SUSE Linux Enterprise Server 12 SP1:xen-tools-4.5.1_12-2.3 SUSE Linux Enterprise Server 12 SP1:xen-tools-domU-4.5.1_12-2.3 SUSE Linux Enterprise Server for SAP Applications 12:xen-4.4.1_10-9.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-doc-html-4.4.1_10-9.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-kmp-default-4.4.1_10_k3.12.36_38-9.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-4.4.1_10-9.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-libs-32bit-4.4.1_10-9.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-4.4.1_10-9.1 SUSE Linux Enterprise Server for SAP Applications 12:xen-tools-domU-4.4.1_10-9.1 SUSE Linux Enterprise Software Development Kit 12:xen-devel-4.4.1_10-9.1 SUSE Linux Enterprise Software Development Kit 12 SP1:xen-devel-4.5.1_12-2.3 SUSE Linux Enterprise Desktop 11 SP4:xen SUSE Linux Enterprise Server 11 SP1 for Teradata:xen SUSE Linux Enterprise Server 11 SP4 LTSS:xen SUSE Linux Enterprise Server 11 SP4-LTSS:xen SUSE Linux Enterprise Server 11 SP4-LTSS:xen-doc-html SUSE Linux Enterprise Server 11 SP4-LTSS:xen-kmp-default SUSE Linux Enterprise Server 11 SP4-LTSS:xen-kmp-pae SUSE Linux Enterprise Server 11 SP4-LTSS:xen-libs SUSE Linux Enterprise Server 11 SP4-LTSS:xen-libs-32bit SUSE Linux Enterprise Server 11 SP4-LTSS:xen-tools SUSE Linux Enterprise Server 11 SP4-LTSS:xen-tools-domU SUSE Linux Enterprise Software Development Kit 11 SP4:xen SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel low 1.9 AV:L/AC:M/Au:N/C:N/I:P/A:N