Linux kernel 2.6.x KVM 'kvm_set_irq()'函数本地缓冲区溢出漏洞

BUGTRAQ ID: 54063 CVE ID: CVE-2012-2137 Linux Kernel是Linux操作系统的内核。 Linux Kernel在实现上存在影响KVM的本地缓冲区溢出漏洞，本地攻击者可利用此漏洞用内核权限运行任意代码。 0 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.kernel.org/...

CVE-2011-1751

The pciejwrite function in hw/acpipiix4.c in the PIIX4 Power Management emulation in qemu-kvm does not check if a device is hotpluggable before unplugging the PCI-ISA bridge, which allows privileged guest users to cause a denial of service guest crash and possibly execute arbitrary code by sendin...

CVE-2011-2212

Buffer overflow in the virtio subsystem in qemu-kvm 0.14.0 and earlier allows privileged guest users to cause a denial of service guest crash or gain privileges via a crafted indirect descriptor related to "virtqueue in and out requests."...

CVE-2011-2512

The virtioqueuenotify in qemu-kvm 0.14.0 and earlier does not properly validate the virtqueue number, which allows guest users to cause a denial of service guest crash and possibly execute arbitrary code via a negative number in the Queue Notify field of the Virtio Header, which bypasses a signed...

CVE-2011-1750

Multiple heap-based buffer overflows in the virtio-blk driver hw/virtio-blk.c in qemu-kvm 0.14.0 allow local guest users to cause a denial of service guest crash and possibly gain privileges via a 1 write request to the virtioblkhandlewrite function or 2 read request to the virtioblkhandleread...

CVE-2011-0011

qemu-kvm before 0.11.0 disables VNC authentication when the password is cleared, which allows remote attackers to bypass authentication and establish VNC sessions...

Design/Logic Flaw

The virtioqueuenotify in qemu-kvm 0.14.0 and earlier does not properly validate the virtqueue number, which allows guest users to cause a denial of service guest crash and possibly execute arbitrary code via a negative number in the Queue Notify field of the Virtio Header, which bypasses a signed...

Buffer overflow

Buffer overflow in the virtio subsystem in qemu-kvm 0.14.0 and earlier allows privileged guest users to cause a denial of service guest crash or gain privileges via a crafted indirect descriptor related to "virtqueue in and out requests."...

Heap overflow

Multiple heap-based buffer overflows in the virtio-blk driver hw/virtio-blk.c in qemu-kvm 0.14.0 allow local guest users to cause a denial of service guest crash and possibly gain privileges via a 1 write request to the virtioblkhandlewrite function or 2 read request to the virtioblkhandleread...

Authentication flaw

qemu-kvm before 0.11.0 disables VNC authentication when the password is cleared, which allows remote attackers to bypass authentication and establish VNC sessions...

Double free

The pciejwrite function in hw/acpipiix4.c in the PIIX4 Power Management emulation in qemu-kvm does not check if a device is hotpluggable before unplugging the PCI-ISA bridge, which allows privileged guest users to cause a denial of service guest crash and possibly execute arbitrary code by sendin...

CVE-2011-1751

CVE-2011-1751 affects qemu-kvm’s PIIX4 Power Management emulation (hw/acpi_piix4.c). The vulnerability arises because pciej_write does not verify whether a device is hotpluggable before unplugging the PCI-ISA bridge, enabling a privileged guest to crash the guest (denial of service) and potential...

CVE-2011-0011

qemu-kvm before 0.11.0 disables VNC authentication when the password is cleared, which allows remote attackers to bypass authentication and establish VNC sessions...

CVE-2011-2212

CVE-2011-2212 describes a buffer overflow in the virtio subsystem of qemu-kvm up to version 0.14.0 and earlier. A privileged guest user could crash the guest or gain host privileges via a crafted indirect descriptor in virtqueue in/out requests. The connected advisories (RHSA-2011:0919, ELSA-2011...

CVE-2011-1750

CVE-2011-1750 affects qemu-kvm 0.14.0 with heap-based buffer overflows in virtio-blk (hw/virtio-blk.c) allowing a privileged guest user to crash the guest or potentially gain host privileges via unaligned read/write requests. Connected advisories confirm affected environments (e.g., RHSA-2011:053...

CVE-2011-2512

CVE-2011-2512 affects qemu-kvm up to version 0.14.0 where virtio_queue_notify did not validate the virtqueue index, allowing a guest user to crash the guest (DoS) and potentially execute arbitrary code using a negative value in the Virtio Header Queue Notify field due to a signed comparison bypas...

CVE-2011-1750

Multiple heap-based buffer overflows in the virtio-blk driver hw/virtio-blk.c in qemu-kvm 0.14.0 allow local guest users to cause a denial of service guest crash and possibly gain privileges via a 1 write request to the virtioblkhandlewrite function or 2 read request to the virtioblkhandleread...

CVE-2011-0011

CVE-2011-0011 affects qemu-kvm prior to 0.11.0, where clearing the VNC password disables authentication and allows a remote user to open VNC sessions without authentication. Red Hat, Oracle Linux, Scientific Linux and MiracleLinux advisories from 2011 document the fix as a backported patch; remed...

CVE-2011-1751

The pciejwrite function in hw/acpipiix4.c in the PIIX4 Power Management emulation in qemu-kvm does not check if a device is hotpluggable before unplugging the PCI-ISA bridge, which allows privileged guest users to cause a denial of service guest crash and possibly execute arbitrary code by sendin...

CentOS 6 : kernel (CESA-2012:0743)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...