114 matches found
[SECURITY] [DSA-2010-1] New kvm packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-2010 [email protected] http://www.debian.org/security/ Dann Frazier March 10, 2010 http://www.debian.org/security/faq - ------------------------------------------------------------------------...
Debian DSA-1996-1 : linux-2.6 - privilege escalation/denial of service/sensitive memory leak
Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, sensitive memory leak or privilege escalation. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-3939 Joseph Malicki reported that the dbglvl sysfs...
[SECURITY] [DSA-1996-1] New Linux 2.6.26 packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-1996-1 [email protected] http://www.debian.org/security/ dann frazier February 12, 2010 http://www.debian.org/security/faq -...
[SECURITY] [DSA-1996-1] New Linux 2.6.26 packages fix several vulnerabilities
---------------------------------------------------------------------- Debian Security Advisory DSA-1996-1 [email protected] http://www.debian.org/security/ dann frazier February 12, 2010 http://www.debian.org/security/faq - ----------------------------------------------------------------------...
AZL-6514 CVE-2010-0298 affecting package kernel for versions less than 5.10.78.1-1
The x86 emulator in KVM 83 does not use the Current Privilege Level CPL and I/O Privilege Level IOPL in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the guest OS by leveraging access to a 1 IO...
Design/Logic Flaw
The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing SMP, does not use the Current Privilege Level CPL and I/O Privilege Level IOPL to restrict instruction execution, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the...
CVE-2010-0306
The connected MiracleLinux AXSA advisory references CVE-2010-0306, describing a vulnerability in the KVM x86 emulator: when a guest is SMP-configured, CPL/IOPL checks are not applied to memory access for CPL3 code. This allows guest OS users to crash the guest or potentially gain privileges by ab...
CVE-2010-0298
Summary: CVE-2010-0298 affects the x86 emulator in KVM 83, where CPL/IOPL checks are not applied to CPL3 memory accesses, enabling a guest OS user to crash the guest or gain privileges via an IO port or MMIO region (related to CVE-2010-0306). What is affected: KVM/x86 emulator code in affected Li...
kvm: emulator privilege escalation IOPL/CPL level check
The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing SMP, does not use the Current Privilege Level CPL and I/O Privilege Level IOPL to restrict instruction execution, which allows guest OS users to cause a denial of service guest OS crash or gain privileges on the...
Important: Red Hat Security Advisory: kvm security and bug fix update
Updated kvm packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. KVM Kernel-based Virtual Machine is a full virtualization solution for...
kvm security and bug fix update
kvm-83-105.0.1.el54.22 - Add kvm-add-oracle-workaround-for-libvirt-bug.patch kvm-83-105.el54.22 - kvm-CVE-2010-0297-usb-linux.c-fix-buffer-overflow.patch bz560769 - Resolves: bz560769 CVE-2010-0297 kvm-userspace-rhel5: usb-linux.c: fix buffer overflow rhel-5.4.z kvm-83-105.el54.21 -...
MW6 Technologies Barcode.dll ActiveX Control Buffer Overflow (CVE-2009-0298)
MW6 Technologies is a provider of barcode software. As part of its software MW6 Technologies includes various ActiveX controls that are used to process the barcode data. One of these ActiveX controls is barcode.dll. There exists a heap-based buffer overflow vulnerability in MW6 Technologies...
CVE-2009-0298
CVE-2009-0298 describes a heap-based buffer overflow in the MW6 Technologies Barcode ActiveX control (Barcode.MW6Barcode.1, Barcode.dll) version 3.0.0.1. The overflow is triggered by a long Supplement property and allows remote attackers to execute arbitrary code. Multiple sources confirm the vul...
CVE-2009-0298
creationtimestamp| type| source ---|---|--- 2009-01-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7869...
CVE-2008-0298
CVE-2008-0298 affects KHTML WebKit as used in Apple Safari 2.x. The vulnerability arises in the browser when rendering crafted pages, potentially involving a STYLE attribute of a DIV element, leading to remote denial of service (browser crash). Connected sources (NVD and related advisories) confi...
CVE-2008-0298
KHTML WebKit as used in Apple Safari 2.x allows remote attackers to cause a denial of service browser crash via a crafted web page, possibly involving a STYLE attribute of a DIV element...
CVE-2007-0298
CVE-2007-0298 concerns a PHP remote file inclusion in LunarPoll’s show.php when register_globals is enabled. An attacker could cause arbitrary PHP code execution by supplying a URL in the PollDir parameter. The affected component is LunarPoll’s show.php, targeting the PollDir input; root cause is...
CVE-2007-0298
PHP remote file inclusion vulnerability in show.php in LunarPoll, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the PollDir parameter...
Solaris 8 (x86) : 120672-08
Mozilla 1.7x86 for Solaris 8 and 9. Date this patch was last updated by Sun : Sep/02/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...