ZTE ZXCLOUD iRAI 跨站请求伪造漏洞

The ZTE ZXCLOUD iRAI is a virtualization appliance from China's ZTE ZTE. A cross-site request forgery vulnerability was previously present in the ZXCLOUD iRAI KVM-ProductV6.03.04 version, which allowed an attacker to submit a malicious request to delete data to an affected device...

April 13, 2021 Security Update (KB5001343)

None None...

Low: Red Hat Security Advisory: virt:8.3 and virt-devel:8.3 security and bug fix update

An update for the virt:8.3 and virt-devel:8.3 modules is now available for Advanced Virtualization for RHEL 8.3.1. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

The vulnerability in the arch/x86/kvm/svm/sev.c component of the Kernel-based Virtual Machine (KVM) virtualization subsystem of Linux operating systems allows a attacker to cause a service failure.

The vulnerability in the kernel-based virtual machine KVM virtualization subsystem of Linux operating systems, specifically in the arch/x86/kvm/svm/sev.c component, involves uncontrolled resource consumption. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the set_memory_region_test function (arch/x86/kvm/svm/svm.c) in Linux operating system kernels allows a malicious actor to cause a service failure.

The vulnerability of the setmemoryregiontest function arch/x86/kvm/svm/svm.c in Linux operating systems is related to an infinite loop. Exploiting this vulnerability could allow an attacker to cause a service failure...

RHEL 8 : virt:8.3 and virt-devel:8.3 (RHSA-2021:1125)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:1125 advisory. The Advanced Virtualization module provides the user-space component for running virtual machines that use KVM in environments managed by Red Hat...

DEBIAN-CVE-2020-36311

An issue was discovered in the Linux kernel before 5.9. arch/x86/kvm/svm/sev.c allows attackers to cause a denial of service soft lockup by triggering destruction of a large SEV VM which requires unregistering many encrypted regions, aka CID-7be74942f184...

CVE-2020-36313

An issue was discovered in the Linux kernel before 5.7. The KVM subsystem allows out-of-range access to memslots after a deletion, aka CID-0774a964ef56. This affects arch/s390/kvm/kvm-s390.c, include/linux/kvmhost.h, and virt/kvm/kvmmain.c...

DEBIAN-CVE-2020-36310

An issue was discovered in the Linux kernel before 5.8. arch/x86/kvm/svm/svm.c allows a setmemoryregiontest infinite loop for certain nested page faults, aka CID-e72436bc3a52...

UBUNTU-CVE-2020-36311

An issue was discovered in the Linux kernel before 5.9. arch/x86/kvm/svm/sev.c allows attackers to cause a denial of service soft lockup by triggering destruction of a large SEV VM which requires unregistering many encrypted regions, aka CID-7be74942f184...

Linux kernel 安全漏洞

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A denial of service vulnerability exists in arch/x86/kvm/svm/sev.c in Linux kernel versions prior to 5.9. An attacker...

Linux kernel 安全漏洞

The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A setmemoryregiontest infinite loop vulnerability exists in arch/x86/kvm/svm/svm.c in Linux kernel versions prior to...

Moderate: virt:rhel and virt-devel:rhel security update

Kernel-based Virtual Machine KVM offers a full virtualization solution for Linux on numerous hardware platforms. The virt:rhel module contains packages which provide user-space components used to run virtual machines using KVM. The packages also provide APIs for managing and interacting with the...

virt:rhel and virt-devel:rhel security update

An update is available for libnbd, nbdkit, libguestfs-winsupport, supermin, libiscsi, hivex, netcf, perl-Sys-Virt, seabios, sgabios, libvirt-dbus, libvirt-python. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Moderate: Red Hat Security Advisory: RHV-H enhancement and security update (redhat-virtualization-host) 4.3.14

An update for redhat-virtualization-host is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

RHEL 7 : RHV-H and security update (redhat-virtualization-host) 4.3.14 (Moderate) (RHSA-2021:1051)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2021:1051 advisory. The redhat-virtualization-host packages provide the Red Hat Virtualization Host. These packages include redhat-release-virtualization-host. Red Hat...

SUSE ovmf 安全漏洞

SUSE ovmf is a firmware from SUSE Germany. It is used to support virtual machines for UEFI. A security vulnerability exists in SUSE ovmf that stems from unrestricted FV recursion...

The vulnerability of the Windows operating system, related to insecure management of privileges, allows a perpetrator to elevate their privileges.

The vulnerability of the App-V Overlay Filter component in the Windows operating system is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...

The vulnerability of clients to virtualization and streaming of Microsoft Application Virtualization (App-V) operating systems for Windows allows a perpetrator to execute arbitrary code.

The vulnerability of clients to virtualization and streaming of Microsoft Application Virtualization App-V operating systems on Windows systems is related to improper code generation. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Security Bulletin: Multiple Vulnerabilities in IBM Java SDK affect IBM Virtualization Engine TS7700 - October 2020 & January 2021

Summary There are multiple vulnerabilities in IBM® SDKs Java™ Technology Edition, Versions 7 and 8, as used by IBM Virtualization Engine TS7700. These issues were disclosed as part of the IBM Java SDK updates in October 2020 and January 2021. IBM Virtualization Engine TS7700 has addressed the...