Ubuntu USN-863-1 (qemu-kvm)

The remote host is missing an update to qemu-kvm announced via advisory USN-863-1. OpenVAS Vulnerability Test $Id: ubuntu8631.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8631.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-863-1 qemu-kvm Authors: Thomas...

Moderate: Red Hat Security Advisory: kvm security and bug fix update

Updated kvm packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on...

kvm security and bug fix update

kvm-83-105.0.1.el54.13 - Add kvm-add-oracle-workaround-for-libvirt-bug.patch kvm-83-105.el54.13 - kvm-kernel-KVM-x86-emulator-limit-instructions-to-15-bytes.patch bz541164 - Resolves: bz541164 CVE-2009-4031 kernel: KVM: x86 emulator: limit instructions to 15 bytes rhel-5.4.z kvm-83-105.el54.12 -...

Ubuntu 9.10 : qemu-kvm vulnerability (USN-863-1)

It was discovered that QEMU did not properly setup the virtio networking features available to its guests. A remote attacker could exploit this to crash QEMU guests which use virtio networking on Linux kernels earlier than 2.6.26. Note that Tenable Network Security has extracted the preceding...

CVE-2009-4031

The doinsnfetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service increased scheduling...

Design/Logic Flaw

The doinsnfetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service increased scheduling...

CVE-2009-4031

The doinsnfetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service increased scheduling...

CVE-2009-4031

The doinsnfetch function in arch/x86/kvm/emulate.c in the x86 emulator in the KVM subsystem in the Linux kernel before 2.6.32-rc8-next-20091125 tries to interpret instructions that contain too many bytes to be valid, which allows guest OS users to cause a denial of service increased scheduling...

CVE-2009-4031

CVE-2009-4031 affects the KVM x86 emulator (arch/x86/kvm/emulate.c) in the Linux kernel prior to 2.6.32-rc8-next-20091125. The do_insn_fetch path could interpret instructions longer than valid, failing to enforce the 15-byte limit per instruction, which guest OS users can abuse to cause a denial ...

SLES11: Security update for KVM

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kvm kvm-kmp-default kvm-kmp-pae More details may also be found by searching for the SuSE Enterprise Server 11 patch database located at...

SLES11: Security update for KVM

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: kvm kvm-kmp-default kvm-kmp-pae More details may also be found by searching for the SuSE Enterprise Server 11 patch database linked in the references...

openSUSE Security Update : kvm (kvm-1545)

This update of QEMU KVM fixes the following bugs : - CVE-2009-3616: CVSS v2 Base Score: 8.5 use-after-free bug in VNC code which might be used to execute code on the host system injected from the guest system - CVE-2009-3638: CVSS v2 Base Score: 7.2 integer overflow in kvmdevioctlgetsupportedcpui...

SuSE 11 Security Update : KVM (SAT Patch Number 1553)

This update of QEMU KVM fixes the following bugs : - use-after-free bug in VNC code which might be used to execute code on the host system injected from the guest system. CVE-2009-3616: CVSS v2 Base Score: 8.5 - integer overflow in kvmdevioctlgetsupportedcpuid. CVE-2009-3638: CVSS v2 Base Score:...

openSUSE Security Update : kvm (kvm-1547)

This update of QEMU KVM fixes the following bugs : - CVE-2009-3616: CVSS v2 Base Score: 8.5 use-after-free bug in VNC code which might be used to execute code on the host system injected from the guest system - CVE-2009-3638: CVSS v2 Base Score: 7.2 integer overflow in kvmdevioctlgetsupportedcpui...

Buffer overflow

Buffer overflow in the kvmvcpuioctlx86setupmce function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.32-rc7 allows local users to cause a denial of service memory corruption or possibly gain privileges via a KVMX86SETUPMCE IOCTL request that specifies a large number o...

CVE-2009-4004

Buffer overflow in the kvmvcpuioctlx86setupmce function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.32-rc7 allows local users to cause a denial of service memory corruption or possibly gain privileges via a KVMX86SETUPMCE IOCTL request that specifies a large number o...

CVE-2009-4004

Buffer overflow in the kvmvcpuioctlx86setupmce function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.32-rc7 allows local users to cause a denial of service memory corruption or possibly gain privileges via a KVMX86SETUPMCE IOCTL request that specifies a large number o...

CVE-2009-4004

CVE-2009-4004 : The Linux kernel KVM subsystem (arch/x86/kvm/x86.c, function kvm_vcpu_ioctl_x86_setup_mce) is vulnerable to a buffer overflow when processing the KVM_X86_SETUP_MCE IOCTL if a large number of Machine Check Exception (MCE) banks is specified. This can lead to denial of service (memo...

CVE-2009-4004

Buffer overflow in the kvmvcpuioctlx86setupmce function in arch/x86/kvm/x86.c in the KVM subsystem in the Linux kernel before 2.6.32-rc7 allows local users to cause a denial of service memory corruption or possibly gain privileges via a KVMX86SETUPMCE IOCTL request that specifies a large number o...

Linux Kernel KVM虚拟机KVM_MAX_MCE_BANKS本地溢出漏洞

BUGTRAQ ID: 37035 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的arch/x86/kvm/x86.c文件中的kvmvcpuioctlx86setupmce函数中存在缓冲区溢出漏洞，本地用户可以通过发送特制的KVMX86SETUPMCE IOCTL请求触发这个溢出，导致执行任意内核态代码。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...