Ubuntu 12.10 : linux vulnerabilities (USN-1813-1)

Mathias Krause discovered an information leak in the Linux kernel's UDF file system implementation. A local user could exploit this flaw to examine some of the kernel's heap memory. CVE-2012-6548 Mathias Krause discovered an information leak in the Linux kernel's ISO 9660 CDROM file system driver...

Ubuntu 12.04 LTS : linux-lts-quantal vulnerabilities (USN-1812-1)

Mathias Krause discovered an information leak in the Linux kernel's UDF file system implementation. A local user could exploit this flaw to examine some of the kernel's heap memory. CVE-2012-6548 Mathias Krause discovered an information leak in the Linux kernel's ISO 9660 CDROM file system driver...

CentOS Update for kernel CESA-2013:0744 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update

An updated rhev-hypervisor6 package that fixes several security issues and various bugs is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

kernel security and bug fix update

2.6.32-358.6.1 - virt kvm: accept unaligned MSRKVMSYSTEMTIME writes Petr Matousek 917020 917021 CVE-2013-1796 - char tty: hold lock across tty buffer finding and buffer filling Prarit Bhargava 928686 901780 - net tcp: fix for zero packetsinflight was too broad Thomas Graf 927309 920794 - net tcp:...

Ubuntu: Security Advisory (USN-1798-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for kmod-kvm CESA-2013:0727 centos5

Check for the Version of kmod-kvm OpenVAS Vulnerability Test CentOS Update for kmod-kvm CESA-2013:0727 centos5 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CentOS Update for kmod-kvm CESA-2013:0727 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 5 : kvm (RHSA-2013:0727)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0727 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. KVM is a Linux kernel module bui...

Scientific Linux Security Update : kvm on SL5.x x86_64 (20130409)

A flaw was found in the way KVM handled guest time updates when the buffer the guest registered by writing to the MSRKVMSYSTEMTIME machine state register MSR crossed a page boundary. A privileged guest user could use this flaw to crash the host or, potentially, escalate their privileges, allowing...

Important: Red Hat Security Advisory: kvm security update

Updated kvm packages that fix three security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

kvm security update

kvm-83-262.0.1.el59.3 - Added kvm-add-oracle-workaround-for-libvirt-bug.patch - Added kvm-Introduce-oel-machine-type.patch kvm-83-262.el53 - kvm-kernel-kvm-accept-unaligned-MSRKVMSYSTEMTIME-writes.patch bz947363 - Resolves: bz947363 RHEL.5.8.32 guest hang when installing kvm-83-262.el52 -...

Fedora Update for kernel FEDORA-2013-4240

Check for the Version of kernel OpenVAS Vulnerability Test Fedora Update for kernel FEDORA-2013-4240 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

Fedora Update for kernel FEDORA-2013-4240

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Linux Kernel KVM 拒绝服务漏洞(CVE-2013-1798)

BUGTRAQ ID: 58604 CVECAN ID: CVE-2013-1798 Linux Kernel是Linux操作系统的内核。 如果客户端指定了带有无效值的IOAPICREGSELECT，然后读取IOAPICREGWINDOW，KVM就不会正确验证该请求。ioapicreadindirect包含了ASSERTredirindex IOAPICNUMPINS，但ASSERT在非调试build中不起作用。在最近版本中，读取无效内存会造成内核崩溃，在较早版本内，会允许客户端读取较大范围的主机内存。攻击者可利用此漏洞触发内核崩溃，拒绝服务合法用户。 0 Linux kernel 3....

CVE-2013-1798

The ioapicreadindirect function in virt/kvm/ioapic.c in the Linux kernel through 3.8.4 does not properly handle a certain combination of invalid IOAPICREGSELECT and IOAPICREGWINDOW operations, which allows guest OS users to obtain sensitive information from host OS memory or cause a denial of...

CVE-2013-1798

The CVE-2013-1798 entry concerns the Linux kernel’s ioapic_read_indirect() in virt/kvm/ioapic.c up to version 3.8.4. A particular sequence of invalid IOAPIC_REG_SELECT/IOAPIC_REG_WINDOW operations can allow a privileged guest OS user to read sensitive host memory or trigger a host OOPS, per multi...

RHEL 6 : JBoss Enterprise Application Platform 5.1.2 update (Low) (RHSA-2011:1798)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1798 advisory. - Invoker servlets authentication bypass HTTP verb tampering CVE-2011-4085 - openid4java AX extension: MITM due to improper validation of AX...

FreeBSD Ports: ImageMagick

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Mandriva Update for imagemagick MDVSA-2012:077 (imagemagick)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...