Ubuntu 10.04 LTS : linux-lts-backport-maverick vulnerabilities (USN-1187-1)

It was discovered that KVM did not correctly initialize certain CPU registers. A local attacker could exploit this to crash the system, leading to a denial of service. CVE-2010-3698 Thomas Pollet discovered that the RDS network protocol did not check certain iovec buffers. A local attacker could...

Debian Security Advisory DSA 2282-1 (qemu-kvm)

The remote host is missing an update to qemu-kvm announced via advisory DSA 2282-1. OpenVAS Vulnerability Test $Id: deb22821.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2282-1 qemu-kvm Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian: Security Advisory (DSA-2282-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 2270-1 (qemu-kvm)

The remote host is missing an update to qemu-kvm announced via advisory DSA 2270-1. OpenVAS Vulnerability Test $Id: deb22701.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2270-1 qemu-kvm Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian Security Advisory DSA 2241-1 (qemu-kvm)

The remote host is missing an update to qemu-kvm announced via advisory DSA 2241-1. OpenVAS Vulnerability Test $Id: deb22411.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2241-1 qemu-kvm Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian: Security Advisory (DSA-2241-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-2270-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for qemu-kvm USN-1177-1

Ubuntu Update for Linux kernel vulnerabilities USN-1177-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11771.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for qemu-kvm USN-1177-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net Thi...

Ubuntu: Security Advisory (USN-1177-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SystemTap "staprun"权限提升安全漏洞

CVE ID: CVE-2011-2502 QEMU是一款开放源码的模拟器软件。 QEMU KVM在-runas参数的实现上存在本地安全限制绕过漏洞，本地攻击者可利用此漏洞绕过安全限制并获取某些文件的非法读写访问权限。 staprun程序没有正确限制模块搜索路径，可通过用户空间搜索和恶意模块搜索路径提升权限。 SystemTap SystemTap 1.x 厂商补丁： SystemTap --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://sourceware.org/systemtap/...

Ubuntu 10.04 LTS / 10.10 / 11.04 : qemu-kvm vulnerability (USN-1177-1)

Andrew Griffiths discovered that QEMU did not correctly drop privileges when using the 'runas' argument. Under certain circumstances a local attacker could exploit this to escalate privileges. Note that Tenable Network Security has extracted the preceding description block directly from the Ubunt...

USN-1177-1: QEMU vulnerability

Andrew Griffiths discovered that QEMU did not correctly drop privileges when using the 'runas' argument. Under certain circumstances a local attacker could exploit this to escalate privileges...

(RHSA-2011:1090) Moderate: rhev-hypervisor security and bug fix update

The rhev-hypervisor package provides a Red Hat Enterprise Virtualization Hypervisor ISO disk image. The Red Hat Enterprise Virtualization Hypervisor is a dedicated Kernel-based Virtual Machine KVM hypervisor. It includes everything necessary to run and manage virtual machines: A subset of the Red...

[SECURITY] [DSA 2282-1] qemu-kvm security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2282-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 25, 2011 http://www.debian.org/security/faq -...

kvm code execution

virtio commands processing code execution...

Debian DSA-2282-1 : qemu-kvm - several vulnerabilities

Two vulnerabilities have been discovered in KVM, a solution for full virtualization on x86 hardware : - CVE-2011-2212 Nelson Elhage discovered a buffer overflow in the virtio subsystem, which could lead to denial of service or privilege escalation. - CVE-2011-2527 Andrew Griffiths discovered that...

[SECURITY] [DSA 2282-1] qemu-kvm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2282-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 25, 2011 http://www.debian.org/security/faq -...

DSA-2282-1 qemu-kvm - several

Bulletin has no description...

kvm (important)

A privileged guest user could cause a buffer overflow in the virtio subsystem of the host, therefore crashing the guest or potentially execute arbitrary code on the host CVE-2011-2212, CVE-2011-2512...

SuSE 11.1 Security Update : KVM (SAT Patch Number 4814)

A privileged guest user could cause a buffer overflow in the virtio subsystem of the host, therefore crashing the guest or potentially execute arbitrary code on the host. CVE-2011-2212 / CVE-2011-2512 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...