140 matches found
CentOS Update for qemu-guest-agent CESA-2014:0420 centos6
Check for the Version of qemu-guest-agent OpenVAS Vulnerability Test CentOS Update for qemu-guest-agent CESA-2014:0420 centos6 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/o...
RedHat Update for qemu-kvm RHSA-2014:0420-01
Check for the Version of qemu-kvm OpenVAS Vulnerability Test RedHat Update for qemu-kvm RHSA-2014:0420-01 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...
CentOS Update for qemu-guest-agent CESA-2014:0420 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 20 : qemu-1.6.2-4.fc20 (2014-5825)
Fix arm sd warnings with latest kernel bz 1091548 - Fix regression in CVE backport that affects openstack thanks lbezdick - Fix guest startup crashes from autotest bz 1081610 - Block/image format validation CVE-2014-0142 - 2014-0148 bz 1078201, bz 1086710, bz 1079140, bz 1086724, bz 1079240, bz...
Ubuntu 14.04 LTS : QEMU vulnerabilities (USN-2182-1)
The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2182-1 advisory. Michael S. Tsirkin discovered that QEMU incorrectly handled vmxnet3 devices. A local guest could possibly use this issue to cause a denial of service, or...
USN-2182-1: QEMU vulnerabilities
Michael S. Tsirkin discovered that QEMU incorrectly handled vmxnet3 devices. A local guest could possibly use this issue to cause a denial of service, or possibly execute arbitrary code on the host. This issue only applied to Ubuntu 13.10 and Ubuntu 14.04 LTS. CVE-2013-4544 Michael S. Tsirkin...
Moderate: Red Hat Security Advisory: qemu-kvm-rhev security update
Updated qemu-kvm-rhev packages that fix several security issues are now available for Red Hat Enterprise Linux OpenStack Platform 3.0. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give...
Scientific Linux Security Update : qemu-kvm on SL6.x i386/x86_64 (20140422)
Multiple integer overflow, input validation, logic error, and buffer overflow flaws were discovered in various QEMU block drivers. An attacker able to modify a disk image file loaded by a guest could use these flaws to crash the guest, or corrupt QEMU process memory on the host, potentially...
RHEL 6 : qemu-kvm (RHSA-2014:0420)
Updated qemu-kvm packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...
qemu security update
CentOS Errata and Security Advisory CESA-2014:0420 Updated qemu-kvm packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS ba...
Moderate: Red Hat Security Advisory: qemu-kvm security update
Updated qemu-kvm packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...
Moderate: Red Hat Security Advisory: qemu-kvm-rhev security update
Updated qemu-kvm-rhev packages that fix several security issues are now available for Red Hat Enterprise Virtualization. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...
Debian DSA-2910-1 : qemu-kvm - security update
Michael S. Tsirkin of Red Hat discovered a buffer overflow flaw in the way qemu processed MAC addresses table update requests from the guest. A privileged guest user could use this flaw to corrupt qemu process memory on the host, which could potentially result in arbitrary code execution on the...
CVE-2014-0150
Integer overflow in the virtionethandlemac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local guest users to execute arbitrary code via a MAC addresses table update request, which triggers a heap-based buffer overflow...
CVE-2014-0150
CVE-2014-0150 affects QEMU up to version 2.0, where an integer overflow in virtio_net_handle_mac (hw/net/virtio-net.c) enables a local guest to trigger a heap-based buffer overflow via a MAC addresses table update. Several advisories (e.g., MiracleLinux AXSA:2014-285:04 and RHSA-2014:0434) descri...
[SECURITY] [DSA 2910-1] qemu-kvm security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2910-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 18, 2014 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2909-1] qemu security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2909-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 18, 2014 http://www.debian.org/security/faq -...
[SECURITY] [DSA 2909-1] qemu security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2909-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 18, 2014 http://www.debian.org/security/faq -...
CVE-2014-0150
Integer overflow in the virtionethandlemac function in hw/net/virtio-net.c in QEMU 2.0 and earlier allows local guest users to execute arbitrary code via a MAC addresses table update request, which triggers a heap-based buffer overflow...
CVE-2013-0150
CVE-2013-0150 is a directory-traversal flaw in client-side signed components used by F5 BIG-IP APM (versions 10.1.0–10.2.4, 11.0.0–11.3.0) and FirePass (6.0.0–6.1.0, 7.0.0) when APM is provisioned. The vulnerability allows a remote attacker to upload and execute arbitrary files by supplying a fil...