KVM security vulnerabilities

DoS on guest system I/O processing...

SuSE 11.1 Security Update : kvm (SAT Patch Number 4574)

The following bugs have been fixed : - By causing a hot-unplug of the pci-isa bridge from within guests the qemu process could access already freed memory. A privileged user inside the guest could exploit that to crash the guest instance or potentially execute arbitrary code on the host...

[SECURITY] [DSA 2241-1] qemu-kvm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2241-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 24, 2011 http://www.debian.org/security/faq -...

DSA-2241-1 qemu-kvm - implementation error

Bulletin has no description...

Red Hat Enterprise Linux 6.1 Released !

Red Hat Enterprise Linux 6.1 is now available at https://www.redhat.com/rhel/. Enhancements provide improvements in system reliability, scalability and performance, coupled with support for upcoming system hardware. This release also delivers patches and security updates, while maintaining...

virtio-blk: heap buffer overflow caused by unaligned requests

Multiple heap-based buffer overflows in the virtio-blk driver hw/virtio-blk.c in qemu-kvm 0.14.0 allow local guest users to cause a denial of service guest crash and possibly gain privileges via a 1 write request to the virtioblkhandlewrite function or 2 read request to the virtioblkhandleread...

Important: Red Hat Security Advisory: qemu-kvm security, bug fix, and enhancement update

Updated qemu-kvm packages that fix two security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores,...

Debian Security Advisory DSA 2230-1 (qemu-kvm)

The remote host is missing an update to qemu-kvm announced via advisory DSA 2230-1. OpenVAS Vulnerability Test $Id: deb22301.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2230-1 qemu-kvm Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian: Security Advisory (DSA-2230-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian DSA-2230-1 : qemu-kvm - several vulnerabilities

Two vulnerabilities have been discovered in KVM, a solution for full virtualization on x86 hardware : - CVE-2011-0011 Setting the VNC password to an empty string silently disabled all authentication. - CVE-2011-1750 The virtio-blk driver performed insufficient validation of read/write I/O from th...

[SECURITY] [DSA 2230-1] qemu-kvm security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2230-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 01, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2230-1] qemu-kvm security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2230-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 01, 2011 http://www.debian.org/security/faq -...

DSA-2230-1 qemu-kvm - several

Bulletin has no description...

OpenStack 'floating Linux kernel' rides VMware hypervisor !

OpenStack 'floating Linux kernel' rides VMware hypervisor ! OpenStack – the open source "infrastructure cloud" project founded by Rackspace and NASA – has released a third version of its platform, offering support for all major hypervisors. With the new release, codenamed "Cactus", developers hav...

Moderate: Red Hat Security Advisory: spice-xpi security update

An updated spice-xpi package that fixes one security issue is now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

Moderate: Red Hat Security Advisory: spice-xpi security update

An updated spice-xpi package that fixes two security issues is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

qemu-kvm: Setting VNC password to empty string silently disables all authentication

qemu-kvm before 0.11.0 disables VNC authentication when the password is cleared, which allows remote attackers to bypass authentication and establish VNC sessions...

Moderate: Red Hat Security Advisory: qemu-kvm security update

Updated qemu-kvm packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

qemu-kvm security update

qemu-kvm-0.12.1.2-2.113.el60.8 - kvm-Revert-blockdev-Fix-drivedel-not-to-crash-when-driv.patch bz677170 - kvm-Revert-blockdev-check-dinfo-ptr-before-using-v2.patch bz677170 - kvm-Revert-Implement-drivedel-to-decouple-block-removal.patch bz677170 -...

Ubuntu Update for linux vulnerabilities USN-1081-1

Ubuntu Update for Linux kernel vulnerabilities USN-1081-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN10811.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux vulnerabilities USN-1081-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH,...