vulnerability

SUSE: CVE-2020-28368: SUSE Linux Security Advisory

Try Surface Command
Back to search
Severity
2
CVSS
(AV:L/AC:L/Au:N/C:P/I:N/A:N)
Published
Nov 10, 2020
Added
Dec 11, 2020
Modified
Feb 4, 2022

Description

Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the guest) via a side-channel attack on a power/energy monitoring interface, aka a "Platypus" attack. NOTE: there is only one logically independent fix: to change the access control for each such interface in Xen.

Solution(s)

suse-upgrade-kernel-azuresuse-upgrade-kernel-azure-develsuse-upgrade-kernel-devel-azuresuse-upgrade-kernel-source-azuresuse-upgrade-kernel-syms-azuresuse-upgrade-xensuse-upgrade-xen-develsuse-upgrade-xen-doc-htmlsuse-upgrade-xen-kmp-defaultsuse-upgrade-xen-kmp-paesuse-upgrade-xen-libssuse-upgrade-xen-libs-32bitsuse-upgrade-xen-toolssuse-upgrade-xen-tools-domususe-upgrade-xen-tools-xendomains-wait-disk

References

Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today